ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="200000004c3e14de4c3e14de00000000dff4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000003a08c6c6000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001000400000000000000010000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009fdbabda000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3933373032393838332f66696c65302f66696c65300000000000000000000000000000000000000000000059309ce2000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067b843af000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f000000000000020014000000000000000100000015000000160000001700000018000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000068bed055000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616ca13ce1c6000000000000000000000000000000000000000000000000200000004c3e14de4c3e14de4c3e14dee0f4655f4c3e14de0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7200}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9004}, {&(0x7f0000000040)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) 17:13:47 executing program 0: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0xff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:13:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 17:13:47 executing program 7: syz_open_dev$hiddev(&(0x7f00000000c0), 0xb77, 0x2000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x400, &(0x7f0000000080)=0x2) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x9200) r4 = syz_open_dev$hidraw(&(0x7f0000000180), 0x6b, 0x40) sendfile(r3, r4, &(0x7f00000001c0)=0xfffffffffffffe01, 0x4905) r5 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x9736) unshare(0x48020200) 17:13:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x24}}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7, 0x7, &(0x7f0000000680)=[{&(0x7f0000000240)="2d2cddd7ae0159817d2aa574c462b6c03e43bf9c6b50f9fcbc58b03f317358af08f67345c77f8be4c9fdf99b5142da627d6cddea5d62fb80e100778b000cceff52b2dae79cc40d80521b47c3b20ebb3cfb179195a7a49d9e06ac65ada1492e3fda5e9efcd0f45ad6fdf5a36d0c14854b1ab8dfa659cc284aa87649f5f5f616124daf3e728017313aeb3ffa3eb27ab253980620c32e3257666e8735a4bff198da191415481112b6ff40f8edbbd4a436bb44c1fff15a8ca6b9f4f64014ace416fbf825330db637116fad5231fd4395b2b3af760714e12b", 0xd6, 0x1f}, {&(0x7f0000000140)="695547cdd7692e5ff0d4ecdbee6dc10b8eef6985454c6921b64269af997f1779472187d838454dcef5ff5c21c62fc577cd8461aa18e51f5d716eca520cd212e7bf82fb99ce1f74a734b6f7", 0x4b}, {&(0x7f0000000340)="cee2dc12983376343ff00b6a427e3d278a5a75022eb12720285e9f4e2380be2d34ff66a61bd1f3311e192a702066fc1fdd4016d7e9518759e9b65a60a14a21bfd8e21561555deee99b962e4f", 0x4c, 0xffffffff7fffffff}, {&(0x7f00000003c0)="498c9e24e204139bc550a3712b9540ca4f71211cfdd8db98a20744d5affbfe9f14bea6b7949462e11225729eae43bcfb74cf60ef02244a70dbb163dbd59010ba301dc3fb69d5e3e2ce69f6627586904289c00a0c77c9fc2d31d339e78c1b9afa37eaa60e08593d969ae7e1474615ea286a2eb98312c2a5ab25bdc2bfd6591e7e1c2e8f14e63916cbcf8a15ff88cfe506cf9efaa5a225f695d4ced6e4d6c02b9421dd749896b9180845f781e80f441833d694bb2b763c6c3bd22db8a9fff1424e8a2571bc3b91351b165b2b9defd44f0104b9e8241f472550ad", 0xd9, 0x6}, {&(0x7f00000004c0)="fc99a6e37be1305ea9bbbc489110d3a6aa37991b29b210a94094059f62a1451f5ae884ecd909b19b1f3a7222a7e3f22fd9c1189e30b003664e9f384035391592e69734d32ab914d7b0339dec7a4d99054b7a6c4700c2d33c3fb02142930919b9f0173d6d04876f6429ba57bda8fddab9317912b9f17fe731910cdc777aa6c07c8184febc862a1c95345297681ae38108816c8f6500a13457ab", 0x99, 0x2}, {&(0x7f00000001c0)="2058ea8d27497ee96d25ae1d4c7d1313755c433bf9fd340ff00298cb369a3f9259009c3e3b55d9a60bdc", 0x2a, 0x4}, {&(0x7f0000000580)="7b61a9c0e1226d4f13ceea166f35ec1fb18228ec82cb5ca45872041321a785b839bef1d3b4d956a3ef9470ebbdca4f5e257f18e99714a9b257b4ea025d3197644fa679f663a1b259438adbbd38448a9dd2d4ed0db55de1f60e77e2b1fad4bc539ad890571b87efc2aa95e824d5951a4f0120b7ed5431c193829e9fe7510b09c404b05f434b2010f78d74b3c3649f205f3530c6a8a20df5fc179337a3e86608a38cae6bbc213acdecee003f2ef6d72446cf9ef4bd051bad82357e080cba7010eda2a0fc9462c3be9d79274664188296c6272423f96382467c1e4ede36", 0xdc, 0xffffffffffffffec}], 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='nod]ts,uid<', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=r1, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB="2c003a5cecd05455a6e5ad87f404000000180000009330e56293b594f8b40d3c18c84d6206d7a6e2debbd4770f8494e22d07c0973a7602c78f60f66d87edbfeb21c66a4cc281"]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) 17:13:47 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x1a9001, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x1) write$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$rfkill(r2, &(0x7f0000000080), 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast1, 0x4}, 0x1c) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x125f, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f00000004c0)={0x7, &(0x7f0000000700)=[{0x1, 0x42, &(0x7f00000000c0)="14c56897dfebf6ca3812765b6c4cf567cf84d51d0d961da51c61a94a8f1545ab663fb90bb045e5c705630c78863ac1b0efd85cf00f5c0ccb7414b25d732fc809c7bf"}, {0x1, 0x5a, &(0x7f0000000140)="88d84ef937e1d3158b3b529be084d63ae0b2e0dfabd735503f785aba92757ffc9c7ee8db9044ea8c5b92c11064069c4e26ab8fbf4d9c07bb398ee4084f668d54616c5b3daf21cfd41fb6575c38d176f1b5f4e9fca69a304eb50f", 0x0, 0x1}, {0x5, 0x3d, &(0x7f00000002c0)="f0607bb3bd753417e42e648e124a243cfff0e52a1f70b458056f8047d2763d33be01ba572a60cfc7377ccc508a01c155ab2d7d4ccc6c292da231209a21"}, {0x8, 0x9b, &(0x7f0000000340)="efea861c30a69702ab4c101eac5f251837039e250ed703b511a66bf76cd5fea5b836a4789596a92c44947f7047b7e48698abd1816840b16b8b96fa58dc9e666fbfb7a9ab46ce8623bb6f904c230c3aa624095f230ad05b546731f5e1f66d881d47d04bbbbcd4dea74495b7a63977cb004ec38faff92e7b7d0a3dfe91fccf4f37b8a4cf4bda2e479e175b6acdf694c965178b8cf26e683d50bdb544", 0x0, 0x1}, {0x0, 0x86, &(0x7f0000000400)="02a10c8c2dc3aa455ea999d2a2802aeb89a70c52521db5c24adbac82a5ab12d76e21cd90b169720a4a25619dc9ee35fb9e43b3a98445a12baa3dcb1346d3b39d79d725c1fb0fd9f76ed93e6a5ffa1483bbbcd703dd0959f85264d4daa6cfe9db3a183f21913049e47a5365e680750ee888ac1e76d485992affed12b11ee23f9f6effca31cb5f", 0x0, 0x1}, {0x2, 0xfa, &(0x7f0000000580)="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", 0x1, 0x1}, {0x5, 0x20, &(0x7f0000000240)="d1e62985b29faa913e7e06ab95fe0f577c43e74045714ed7051148a4a224236c"}]}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)="8ca20d3e9700eae28ac5938ccefe6b1ccefe30832caf687e391b1816d2bacd", 0x1f}, {&(0x7f0000000c40)="eb4b4470ee56ac4dcd690abc61bbaab1734dd8b68b6fa9b35316f7002ccda920715caffa2262ab6641c48be5f6fc4c61afef61b72e85660827ca26f5618af4934cd89affd74fdea3dfc11fb8faf7e0d7ac88671514b7ac6aa4254f9c64632c68b8ab7d705556c6dc18f2ca230c134847c16ebec06ffd009f1b5128a15d34f9643cb6779246688ea2385e587ac982441c385a6e04518f641ffc73d3dfee96b4512ca5dd0903ec77559958968dab5bdbe148f9d5b4a53177f5ccbbea66daf3b862e6c4", 0xc2}, {&(0x7f0000000d40)="7260721c32a742bb419b5e65bb20f6dada8451c39ac072b4802803a1d0a276675c7d30d2c321b484f09a652cce635ded3e42fba0c84e1a4669a74cd793adb2acc0cc2a9e88ad47e1aef5a9a93565fe9e3149fc8559318b0ebaa043a8c4676580f6e7c8d76dd56e4f6bdd41ea804ec9f49dbc793995a47261dcc07cb4d90f5f4ed1e982fbd4bbeb3f0d35311938d5c97e37b692afff2e4cd7835b9da41054a28196230e2d14ea7325fd92fdfe2ec903250d59cb76", 0xb4}, {&(0x7f0000000e00)="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", 0xfa}], 0x4}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000800)={0x0, 0x2, 0x2, 0x1}) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x4b0, @private2, 0xffffffc0}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x44459cda, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 17:13:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 17:13:47 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r0, 0x403, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40000c5) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x20000, 0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x20044800) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = pkey_alloc(0x0, 0x0) pkey_free(r5) pkey_alloc(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) [ 126.854568] Restarting kernel threads ... done. 17:13:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x10000, 0x10) lremovexattr(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)=@known='system.posix_acl_access\x00') [ 126.900135] FAT-fs (loop2): Unrecognized mount option "nod]ts" or missing value [ 126.981919] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 17:13:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) 17:13:48 executing program 2: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="000229bd7000fbdbdf2517000000300001800800030002000000140000000061696630000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000044000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="febcf90c4990ceb563ce8c96871a57d423268883927018b38bc427291bda39eecadb8c8587bfeb16b99444", @ANYRES32, @ANYBLOB="461ce1ad18ad6b0594a395d96fb5b7cc2acf4ceeb44dd463e595f499a433452dcbc8fdebffa7548bc713b6757cbaf071f316042b795f88e83671a4c047a8d68fe2122312d669246a215e0c447c5b9fefe7e0c6d87cd4db4378d52cc6b887d202d50900bcc9e22770e1"], 0xc4}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) r4 = syz_io_uring_setup(0x1baf, &(0x7f0000000080)={0x0, 0xaf1f, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r4, 0x76d3, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fallocate(r7, 0x6, 0xffff, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) copy_file_range(r9, 0x0, r8, 0x0, 0x200f5ef, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 17:13:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a00210c00000000000000000a00e6625cd642c686b90000060000000000000008000300", @ANYRES64=r2], 0x2c}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@private2, 0x80, r2}) 17:13:48 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote}, {{0x2800, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@mpls_mc={0x8848, {[{0x7ff}, {}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x81, 0x0, 0x1}], @ipv6=@udp={0x1, 0x6, "106109", 0x90, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[@hopopts={0xc, 0x7, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn, @ra={0x5, 0x2, 0x88a7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "25d0fafefabf01ac97e25030fd9810bbf0203ef9eadfc9d4", "6c4f8126e30a8a90ae3f02ec30bb8dafd6c4646b0dfaf2a8a0202abb34c53a3c"}}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="3885e42d07aa", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "17714afe9c440aab"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x4d0, 0x18b, 0xd32, 0x324]}) [ 127.173336] device lo entered promiscuous mode 17:13:48 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6368654a6d357a1623d703fb716f1ffd09177374726963742c6961736574516370305ecb2cffffffff4677cfaae0af366b449b117f62755a5ec3f57fb2ccb197cc8977f5da7ef4d8ebc3ba5d73a87b200ab980bbb1062dce271972735f36b1bd8f7f3fdf8967c6f8a03bb70293891333cc931de550093790081ea8a13a6a4d3e4bb59f2e4862555d35ec30282c1aa1b8325abf93f2172452fd164ef227a30d90547fb8bf6a141d14cf9e8fe637b21afa8e1e776f0274fdee2659308c59f7b2a886c8962104f1707fdb502cde44acf4487b1c1a6a2e9cc7524df4244af5d35715b3458ef595674438d92719ca2f9b2189e20e56d0a2c6fe1c151806c7eb1d498099eb4843e846cc21fb34348392c7da095f73b50cfe"]) 17:13:48 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000ff", @ANYRES16=r0, @ANYBLOB="180128bd7000fddbdf25120000004800018008e90000", @ANYRES32=r5, @ANYBLOB="0800030003249964aa035cc3cda7d12e26000000000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000100000014000200626f6e645f736c6176652230000000000800030000000000b1f2b6c419b7dfbf4404fb3ed37e14b7f5ebdce39df790e8ac4e69d4aa810ff15c5e7dbd1a5030ebce8d43158f0788ad5f01d9165ce754e34424ddbd7fc8c7b96a2d0bd664b36713f5ddc1bcb9ed6fe652ab29f78d8b89df0c8390a1a584b8917e23f937a6dd2f93a7"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, "2ede1e31271b39d4"}) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000000)={0x81, 0xb0, 0x8000, 0x9, 0x78, "9caa2de3a36a4309567d1f795b916142c74cb7", 0x6, 0x7b3}) ioctl$PIO_FONTRESET(r10, 0x4b6d, 0x0) 17:13:48 executing program 7: syz_open_dev$hiddev(&(0x7f00000000c0), 0xb77, 0x2000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = pidfd_getfd(r1, r0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x400, &(0x7f0000000080)=0x2) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x9200) r4 = syz_open_dev$hidraw(&(0x7f0000000180), 0x6b, 0x40) sendfile(r3, r4, &(0x7f00000001c0)=0xfffffffffffffe01, 0x4905) r5 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x9736) unshare(0x48020200) [ 127.440902] device lo entered promiscuous mode [ 127.448558] device syz_tun entered promiscuous mode [ 127.469150] device lo left promiscuous mode [ 127.480026] device lo entered promiscuous mode [ 127.568072] device lo left promiscuous mode [ 127.599343] device lo left promiscuous mode [ 127.601756] device syz_tun left promiscuous mode [ 127.613105] device lo entered promiscuous mode [ 127.615061] device syz_tun entered promiscuous mode [ 127.665854] device lo left promiscuous mode [ 127.668779] device syz_tun left promiscuous mode [ 137.385794] kmemleak: 57 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:14:05 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000ff", @ANYRES16=r0, @ANYBLOB="180128bd7000fddbdf25120000004800018008e90000", @ANYRES32=r5, @ANYBLOB="0800030003249964aa035cc3cda7d12e26000000000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000100000014000200626f6e645f736c6176652230000000000800030000000000b1f2b6c419b7dfbf4404fb3ed37e14b7f5ebdce39df790e8ac4e69d4aa810ff15c5e7dbd1a5030ebce8d43158f0788ad5f01d9165ce754e34424ddbd7fc8c7b96a2d0bd664b36713f5ddc1bcb9ed6fe652ab29f78d8b89df0c8390a1a584b8917e23f937a6dd2f93a7"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, "2ede1e31271b39d4"}) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000000)={0x81, 0xb0, 0x8000, 0x9, 0x78, "9caa2de3a36a4309567d1f795b916142c74cb7", 0x6, 0x7b3}) ioctl$PIO_FONTRESET(r10, 0x4b6d, 0x0) 17:14:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000f34c07b0832fa06ee9362ad6ba5c3de9d7302e97064c69760ad1cbda506087f22d40fcaa8633d029ef5a491d5ae0cca06a5ba75eef1ab76fb9c35afc28e166d747e6fff85f38c8fee03328f43cb0beec2bb5328a4e901d8452f19e4632448fc3ccab590923f20370bae05f6d87b94a32424e6f8be5da86f1fe2a71a2bfe82adbb8b413ad671742a1eb6a876f7ec74e10021bc1092e22630e5a38d51e7aef1ae4f2228b32de2b31cefc84595277a2d6b6b6600317015d6999f9", @ANYRES32=r1, @ANYRES32=r0], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 17:14:05 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r0, 0x403, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40000c5) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x20000, 0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x20044800) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = pkey_alloc(0x0, 0x0) pkey_free(r5) pkey_alloc(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) 17:14:05 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x20, 0x8, 0x4, 0x81, 0x0, 0x200, 0x802, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8c00, 0x2, 0x80, 0x8, 0xfffffffffffffff7, 0x1000000, 0x2, 0x0, 0x7fff, 0x0, 0x1}) close_range(r1, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x20d315) 17:14:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x80000000, 0x5f55) 17:14:05 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x161, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 17:14:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029e314a5f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610300000009000000000000000000000000000000000055aa", 0x20, 0x3}, {&(0x7f0000010300)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029e314a5f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000000480)="0000000000000000000000003b39847f699bcc1b7abd6952eb6f1914f573c9efdc6acaa4abb846432498000000000000", 0x30, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0f0700000008000000ffffff0fffffff0f00"/64, 0x40, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0f0700000008000000ffffff0fffffff0f00"/64, 0x40, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0f0700000008000000ffffff0fffffff0f00"/64, 0x40, 0x4403}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0f0700000008000000ffffff0fffffff0f00"/64, 0x40, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100089eb70325132510000eb7032510300000000002e2e202020202020202020100089eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200089eb70325132510000eb70325104001a040000", 0x80, 0x5800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x7800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xb800}], 0x0, &(0x7f00000004c0)={[], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000040)='./file2\x00', 0x200) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80100, 0xa8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x1e3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)=""/93, 0x5d}], 0x2) fcntl$setstatus(r1, 0x4, 0x2800) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x92) 17:14:05 executing program 5: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x3, 0x3, 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="e3539e225c790c86f0bf66dd", 0xc}, {&(0x7f0000000100)="ba9cab40b19372218c150914bda7f5a328d27c5a536824cfc4b4691b885c48e153c89fa3a2ceaf10efd72ac306a20e6f4c9ef3115a678600db5200243607823e966b032743da747ae915990edaad49df0e5b3841541add14b776d7a22f8905b69fe632c6a1466fcb0b4b48b05c31ea22b5b4759ef6055e4f893e550b722a4940d2bdb6", 0x83}], 0x2, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)}]) [ 144.114251] device lo entered promiscuous mode [ 144.116563] device syz_tun entered promiscuous mode [ 144.119943] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 144.128740] FAT-fs (loop7): Unrecognized mount option "fsname=vfat" or missing value 17:14:05 executing program 6: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000ff", @ANYRES16=r0, @ANYBLOB="180128bd7000fddbdf25120000004800018008e90000", @ANYRES32=r5, @ANYBLOB="0800030003249964aa035cc3cda7d12e26000000000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000100000014000200626f6e645f736c6176652230000000000800030000000000b1f2b6c419b7dfbf4404fb3ed37e14b7f5ebdce39df790e8ac4e69d4aa810ff15c5e7dbd1a5030ebce8d43158f0788ad5f01d9165ce754e34424ddbd7fc8c7b96a2d0bd664b36713f5ddc1bcb9ed6fe652ab29f78d8b89df0c8390a1a584b8917e23f937a6dd2f93a7"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, "2ede1e31271b39d4"}) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000000)={0x81, 0xb0, 0x8000, 0x9, 0x78, "9caa2de3a36a4309567d1f795b916142c74cb7", 0x6, 0x7b3}) ioctl$PIO_FONTRESET(r10, 0x4b6d, 0x0) 17:14:05 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {0x0, 0x0, 0x2000000000c00}, {0x0, 0x0, 0xfffffffffffff569}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000040)={[{@noload}, {@debug}, {@block_validity}, {@data_writeback}, {@nouid32}, {@resuid={'resuid', 0x3d, r0}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}, {@nombcache}, {@block_validity}]}) 17:14:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="02a0e28d80f1e46995560b4e8d63188d6a"], 0x11, 0x2) write(r2, &(0x7f0000000080)="1f", 0x1) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x37, 0x6f, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xd80f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 144.259767] device lo left promiscuous mode [ 144.263804] device syz_tun left promiscuous mode [ 144.335176] device lo entered promiscuous mode [ 144.338312] device syz_tun entered promiscuous mode [ 144.389819] device lo left promiscuous mode [ 144.394730] device syz_tun left promiscuous mode [ 144.944440] FAT-fs (loop7): Unrecognized mount option "fsname=vfat" or missing value [ 155.965683] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:14:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) pwrite64(r0, &(0x7f0000000340)="8f", 0x1, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x101000, 0x100) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x5e, 0x81, 0x9, 0x41, 0xc96, 0x3, 0x0, 0x5, 0x107, 0x40, 0x1f5, 0xffffff23, 0x4, 0x38, 0x1, 0xfff, 0x800, 0x6}, [{0x5, 0x401, 0xf67f, 0x5, 0x7f, 0x6, 0xeded, 0x1}], "ab87ac2173c5931f6a6d500a819800ae7b966d7473b78a4c5b789215fc032cebbc93eeb70cc4a4456a9cfa67193acf7959903257f644456b57456dede0a013d8fd43586f6a76a84da3f3974c4aadf31f88593c90c6f7c03ece4d4a6ca136a1d6cca69c75df0f256a97932a4fe188baca77d82a1e9b5cc50801b198d701afc4e7bc3cf93746462258f861680843", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x805) fcntl$setstatus(r3, 0x4, 0x2800) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x100, 0x0) 17:14:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e23, 0x2ca, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x5c, r6, r7}, {0x40, 0x90, 0x100000000, 0x7, 0x200, 0xffffffffffff8001, 0x3ff, 0x6}, {0x9, 0x4b, 0x9bf, 0x3}, 0x48, 0x0, 0x1, 0xea692b82812f6538, 0x1}, {{@in6=@mcast2, 0x4d5, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x0, 0x3, 0x8, 0x62a1, 0x9}}, 0xe8) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000070000053c8d4294b2650089"], 0x18}}], 0x1, 0x0) 17:14:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x38, 0x9, &(0x7f0000000640)=[{&(0x7f0000000280)="ee73835d62af19d9c4def8aaf4d5fff2cd0226f10cb2366465ad5d18ec589e38dc5f9effcc4774c10e0aff1d67fa94af02778e120fd22a3d246bd0bdc21b587bde1d747c384c39efd0d7e3ffc8be74915d29d7b8b55d0aadaf3f7791d3e1c9648bfd79e0", 0x64, 0x4}, {&(0x7f0000000300)="6e58b1d1ca48b19bfd4f1bc3", 0xc, 0x7}, {&(0x7f0000000340)="5fd3897ed8a636400da68fc90fb994e1108b5137f7b34382c4772fccdf47774b50859a6ac412569afd482f4a7a988b5461879dabb0c5696906784b23f7e5695c9ea7f12de695e3c8bf1316d1bf65cdace01a2ac9af6dbddcbc74", 0x5a, 0x3}, {&(0x7f00000003c0)="9b6b3a7f53d2e691889ee90426d6dff814d08ae498f1a627900dacb691b629a6d6454531b37ab3d5fee93cf09495eef614", 0x31, 0x4}, {&(0x7f0000000400)="b49805ac88df28df56d476a55455ecc53d4aa234d7a8f859a0aa7c84e61bb1c38e14da0a8d90896f8aee10131110ace71f9bb77ee5e93040660f452b6a5871d14d22271441f85164c113dfd91900477ae21c8f8ef6445aa0e2c67c1c30731ab60f68fd7531e670c76b8a9edd8863490cfe481c832eb28e6a7f4576ae8d174e7f4912d8269a25fbb27062cc3db51cf43f57714271", 0x94, 0xfffffffffffffff9}, {&(0x7f00000004c0)="ef75cfe4c6dbc7770883f8fdcfda73cc382535a53ffccb8d93b284d65c1144fa56af7c19", 0x24, 0x1}, {&(0x7f0000000500)="75cff7949454197622ff981dfe0ceb11175190c6ff57de187acc5bcadbd18fdbeb5548b4f61697ebdc56b86dd1118f582a06b7039b2f6395dfce3e572cee18d4", 0x40, 0x98}, {&(0x7f0000000540), 0x0, 0x180000000}, {&(0x7f0000000580)="9642d54b037d43c417cc0e81dcb527b61a45055175e533898e39ee04ee2a19ed4f5427c6c9e162e423f3d901ec65942fda93a38e19724b962b1bd20916f84432c439d1e6cc37acdf8f79a87b4fe3937c41647be977e8dbc51a681adc2c7a1fcae219b0ec5a8d87316a19d946490a0a489cb9f2e6d9513d5021f5d7ef589a8d0f9a3985f31327a1ee96e8", 0x8a, 0x3ff}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) acct(&(0x7f0000000180)='./file1\x00') r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87b2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x204a00, 0x62) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = fcntl$dupfd(r6, 0x406, r4) pwrite64(r7, &(0x7f0000000880)="71a6675d8190a42009bff7f992954e464ffa0ed1c703be413484385aedc902ad2076fd0af0afd9b1b069668b950b01f5f40a67bf3b7df70aa446f71c6672c588d96acf0a9789b0faf9cb2ed8125f9606ba8d4b1fa297791eb1471f554ab764bcad9c067f1c5da0d8a605377f2946507c3456103394de3b9c2f6e27ce8ead1c5498b884e078e1a2255f55d3", 0x8b, 0x3) fcntl$setstatus(r5, 0x4, 0x2800) sendto$unix(r5, &(0x7f0000000780)="7c110d0e62097f6cfb746f7031410321bdbcc49d6f37502341aeffb884f1f875247b6115744a8e061d8dca75c72404a8aa63781772af54ec1beb2a91ed96e27c9f555bf9175b15ce225bad5ae4bba105a77ce320207d8c16b7a3182e6c437ef73e2bb0222398b14cd3c91283dab0297ab330c93401598775c828423f5d430c054f8b6aca82aa7a97e24b8173fa9c54ecb3bb60cbe27bb75570b35e4a2728d22fa141dea5fd3edcf078bb83eee2b19e5d9b2ea10a0d4038da85f3957e6ce59dfcc20b3518d8bf6817692f1140efc9d5", 0xcf, 0x0, 0x0, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181140, 0x20) sendfile(r3, r0, 0x0, 0x100010000) 17:14:23 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 17:14:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000001140)=""/126, 0x7e}, {&(0x7f00000011c0)=""/150, 0x96}, {&(0x7f0000001280)=""/207, 0xcf}, {&(0x7f0000001380)=""/39, 0x27}], 0x6, 0x7f, 0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) 17:14:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001700)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6fd, 0x7, &(0x7f0000001540)=[{&(0x7f0000000140)="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", 0x1000, 0x9}, {&(0x7f0000001140)="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", 0xfe, 0x579}, {&(0x7f0000001240)="a3cbd3faa14c04955eaafede6ef3a471de55bd023e694c111ec8e122f1fa50a87a21757bbdd0ce85b0718e96cad08dbde55fb6bfd1a92a8ea25d5b4abaf744b8daa650ec5aaca19c5dd35035740cf716566e01556fbf70e44ebb1bf6bea5f4cd624387a810d92c22ce5769ed4964e764b4d149640588b21cda4de1eee7218e0ae6b2aecc4a11cd8fbd1960443c8a998c719bac0a320a94109e7c35e267d1fc3d5c808afcef7053b56b63dd3704694350ec8c6b7c21", 0xb5}, {&(0x7f0000001300), 0x0, 0x9}, {&(0x7f0000001340)="20280cf84113a0323826cc02e21dc419a826e3f75e4d688dab98439a3ece8ba2987371410c0ef87d1090a53980329b403f9410ecca07fdc8b0e6e57b0b84f2e1dfb81112649cdae4fcea2abf9cb49a51bf6dc5bbd05a66cce74cfb596bd28fdddc4ec735dacbb916fb946b49ca50a6178b1ea699ec586c287446982fccb8d7f20720dafe74e0713f456a206c547f3eaee8538cab09faa8999231693e038fb7634185716dd35ded", 0xa7, 0xa800}, {&(0x7f0000001400)="4a9e02d067294f5473d7dd687877ec20187454086541a0b856d75c40fcf6b291a4572a", 0x23, 0x2}, {&(0x7f0000001440)="496c20a9321235fbdeff3408f0dc30405365db7704305d0b0f025012948de0405f017e0d0debbd85ea24bb19df48bae43cb6f2afb30604be233714ca29342d2e1ea85dbe5a6e4114dd435dfb2ae4aa25a94acec864bbfade4a85647d50d981c8976e1aa1ee09ad207cd35ba551253a3eb6ca53ffc364ef492ee359aeeb2af24689a31d560965db78e6cd83907720576e46cd341ee21016945c51759dafe3be78c30a732f0ada2d2023bdfb89117c4b9a1ced3a1a0b6c99eb59e9f385d24debd50f2053384f3458220ab4f8870785d6da1d584db9a1", 0xd5, 0xffffffff}], 0x200400, &(0x7f0000001740)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x34, 0x31, 0x30]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x65, 0x65, 0x78, 0x6d, 0x33]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x32, 0x78, 0x35, 0x31, 0x6b, 0x25, 0x5f, 0x78]}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'mpol'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'mpol'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '=static'}}, {@uid_gt={'uid>', r0}}]}) 17:14:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) pipe(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000740)='.\x00', 0x7, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xc) r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="acb5be42513ec45fd89f987f6b4476f20830af14a8438b057258e6dbea1a6d95200e57c39937b23bac58f28631621310fb44a4f946e8665201f0d305b16ad3566e47859a90d8e952d6aa8e36fa602095cbb800359f3a4e4d9622f54d091447b0f29336d5e4b735fbd7644100c49f3d92063e4ea20fc5bfeb8590aaf32c"]) r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) openat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={0x0, "1f6afbf3ff6546600d3641e964606ac3"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001ac0)={r3, 0x9, 0x7}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000340)="d8ffdcb88699ddf15c6f895230596b4fe6ab5c9b7f9412e4ba5076199757eeced3abdac4d62aab1cf59e0a29288a56bcbc53ed15b39c418ea175f1fc229ecde18c24ada808ecc463f2fe19d835f31ca42f465a19494c6919f3c1c803c6f3c3cfa655f9c5f26c210e8494c42ca4eaaee3a169699ea85c5edba7d090c84eda0f820db8ec09c23fbd3a34f85426b49fd32d2a38b5b894293e34e9afa4929ad9081bbc5bf9e9d645b3ee232b1a4a84bf09f5772f", 0xb2, 0x3) r4 = getpgid(0x0) rt_tgsigqueueinfo(r4, 0x0, 0x11, 0x0) 17:14:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="0100000000006f0000be1be89f290c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) [ 161.957393] tmpfs: Bad value for 'mpol' [ 161.982237] tmpfs: Bad value for 'nr_blocks' [ 161.991891] tmpfs: Bad value for 'mpol' [ 162.023669] tmpfs: Bad value for 'nr_blocks' 17:14:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x191) fcntl$setstatus(r0, 0x4, 0x6400) write(r0, &(0x7f0000001200), 0xffffff45) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x5, 0x5, 0x0, 0x401, 0x20020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x804, 0x6000, 0xb9, 0x7, 0x965, 0x3, 0x6, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) [ 162.048205] FAT-fs (loop7): Unrecognized mount option "18446744073709551615" or missing value 17:14:23 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @redirect={0x6c, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) syz_emit_ethernet(0x215, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "2c18d5", 0x1df, 0x6, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x32, 0xe, 0x4, 0x7, 0x20, 0x40, 0xffff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @mcast2]}], {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x1d, 0x80, 0x5, 0x0, 0x7, {[@md5sig={0x13, 0x12, "279be031ad912fc104790ab32f70c80f"}, @md5sig={0x13, 0x12, "a6de69166642e2f4d313f52d38c3754e"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "2a3cb07fef58a67b41f90800947ff859"}, @window={0x3, 0x3, 0x1}, @fastopen={0x22, 0x3, ')'}, @generic={0x0, 0x12, "54c213d5c01c8e190b3560401db62860"}, @mss={0x2, 0x4, 0x4}, @eol, @sack={0x5, 0x6, [0x7]}]}}, {"0be7cc9402c19fc4e4aacd36fa04725b0e566c76b5aa1f66a033ead1a9b4f7a4fc9f2f65988254196ea2e71d551a45f6a577110f1d2620fb2b2eb3e52e30719335e90bcab9702f8972f21e2dae3b95cf35352e4b38f1ff024eea6e73f883d0b8f0defa71a8d143bd5e23f2e6bbf1c7f6f8f9ec9a665f952ec95433617b3f7da3af82acf7e617c0057543b8fe6f788a2e0d924fc296121b5b71f034bb8880a8df03c4b656ab2055b96038d9c3e29bca60ee8635ccc504d6634d0e8f1f2b5ffe3e896241a1fa5b58eda3a2046aa70011e0e2e28b0f291e7abf6707cf03e7372b48288ce0532fd3e58f6ff95c9973bf74aff06d36"}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0xc, 0x4, 0x1, 0x7, 0xb0, 0x68, 0x0, 0x81, 0x21, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0x18, 0xfb, 0x0, 0x3, [0x9, 0xbbc, 0x4, 0xfff, 0x20]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "a1dc50", 0x20, "90765a"}, "dca9d87cb70bd98d4605ee35b46977e9d9450afddcab6e6c89eadb3cab76422a47ff87f97af2304ddcf2d29f6f42dc464df976480200e38d3d4446f4fb64f6764503312b58db415b7395273ebd92ff2b1a725ed269d38b278a32def4747b88b5f7df8c1933b40b0ccd18113163dd49e5"}}}}}, &(0x7f0000000400)={0x0, 0x4, [0x2a1, 0x8e8, 0xbd5, 0x911]}) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@local, @random="dd93c74fc2bc", @void, {@can={0xc, {{0x4, 0x1}, 0x5, 0x0, 0x0, 0x0, "6c755ce8e9f11db6"}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @broadcast, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @remote, @private0, @random="98cbbd3d3d17", @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, &(0x7f0000000300)={0x1, 0x4, [0x2ab, 0xf94, 0x7c7, 0x32b]}) [ 162.127267] nfs: Unknown parameter '®fat' [ 162.150754] device lo entered promiscuous mode [ 162.155670] device syz_tun entered promiscuous mode 17:14:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) pipe(0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000740)='.\x00', 0x7, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xc) r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b70000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000010900)='\"', 0x1, 0xb800}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="acb5be42513ec45fd89f987f6b4476f20830af14a8438b057258e6dbea1a6d95200e57c39937b23bac58f28631621310fb44a4f946e8665201f0d305b16ad3566e47859a90d8e952d6aa8e36fa602095cbb800359f3a4e4d9622f54d091447b0f29336d5e4b735fbd7644100c49f3d92063e4ea20fc5bfeb8590aaf32c"]) r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) openat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={0x0, "1f6afbf3ff6546600d3641e964606ac3"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001ac0)={r3, 0x9, 0x7}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000340)="d8ffdcb88699ddf15c6f895230596b4fe6ab5c9b7f9412e4ba5076199757eeced3abdac4d62aab1cf59e0a29288a56bcbc53ed15b39c418ea175f1fc229ecde18c24ada808ecc463f2fe19d835f31ca42f465a19494c6919f3c1c803c6f3c3cfa655f9c5f26c210e8494c42ca4eaaee3a169699ea85c5edba7d090c84eda0f820db8ec09c23fbd3a34f85426b49fd32d2a38b5b894293e34e9afa4929ad9081bbc5bf9e9d645b3ee232b1a4a84bf09f5772f", 0xb2, 0x3) r4 = getpgid(0x0) rt_tgsigqueueinfo(r4, 0x0, 0x11, 0x0) 17:14:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001700)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6fd, 0x7, &(0x7f0000001540)=[{&(0x7f0000000140)="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", 0x1000, 0x9}, {&(0x7f0000001140)="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", 0xfe, 0x579}, {&(0x7f0000001240)="a3cbd3faa14c04955eaafede6ef3a471de55bd023e694c111ec8e122f1fa50a87a21757bbdd0ce85b0718e96cad08dbde55fb6bfd1a92a8ea25d5b4abaf744b8daa650ec5aaca19c5dd35035740cf716566e01556fbf70e44ebb1bf6bea5f4cd624387a810d92c22ce5769ed4964e764b4d149640588b21cda4de1eee7218e0ae6b2aecc4a11cd8fbd1960443c8a998c719bac0a320a94109e7c35e267d1fc3d5c808afcef7053b56b63dd3704694350ec8c6b7c21", 0xb5}, {&(0x7f0000001300), 0x0, 0x9}, {&(0x7f0000001340)="20280cf84113a0323826cc02e21dc419a826e3f75e4d688dab98439a3ece8ba2987371410c0ef87d1090a53980329b403f9410ecca07fdc8b0e6e57b0b84f2e1dfb81112649cdae4fcea2abf9cb49a51bf6dc5bbd05a66cce74cfb596bd28fdddc4ec735dacbb916fb946b49ca50a6178b1ea699ec586c287446982fccb8d7f20720dafe74e0713f456a206c547f3eaee8538cab09faa8999231693e038fb7634185716dd35ded", 0xa7, 0xa800}, {&(0x7f0000001400)="4a9e02d067294f5473d7dd687877ec20187454086541a0b856d75c40fcf6b291a4572a", 0x23, 0x2}, {&(0x7f0000001440)="496c20a9321235fbdeff3408f0dc30405365db7704305d0b0f025012948de0405f017e0d0debbd85ea24bb19df48bae43cb6f2afb30604be233714ca29342d2e1ea85dbe5a6e4114dd435dfb2ae4aa25a94acec864bbfade4a85647d50d981c8976e1aa1ee09ad207cd35ba551253a3eb6ca53ffc364ef492ee359aeeb2af24689a31d560965db78e6cd83907720576e46cd341ee21016945c51759dafe3be78c30a732f0ada2d2023bdfb89117c4b9a1ced3a1a0b6c99eb59e9f385d24debd50f2053384f3458220ab4f8870785d6da1d584db9a1", 0xd5, 0xffffffff}], 0x200400, &(0x7f0000001740)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x34, 0x31, 0x30]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x65, 0x65, 0x78, 0x6d, 0x33]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x32, 0x78, 0x35, 0x31, 0x6b, 0x25, 0x5f, 0x78]}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'mpol'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'mpol'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '=static'}}, {@uid_gt={'uid>', r0}}]}) 17:14:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="3d9f8f37373c26ac34131c2ec7"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 162.250698] tmpfs: Bad value for 'mpol' [ 162.274337] device syz_tun left promiscuous mode [ 162.276158] device lo left promiscuous mode [ 162.302534] tmpfs: Bad value for 'nr_blocks' 17:14:23 executing program 2: unshare(0x60040000) unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 17:14:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1e0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003005e000100062d00000000000000004000000300000000ae01000000000100000000000000380001"], 0xa78) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 162.353510] device lo entered promiscuous mode [ 162.359952] device syz_tun entered promiscuous mode [ 162.367897] FAT-fs (loop0): Unrecognized mount option "=Ÿ77<&¬4.Ç" or missing value [ 162.372138] device syz_tun left promiscuous mode [ 162.372924] device lo left promiscuous mode 17:14:23 executing program 3: stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = getuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r4, 0x0) setresuid(r4, r3, r2) setresuid(r2, r0, r3) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r5, 0x4004) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = fork() r7 = fcntl$getown(r1, 0x9) ptrace$setopts(0x4206, r7, 0x0, 0x0) fcntl$setown(r1, 0x8, r6) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r1, &(0x7f0000000700)=""/4096, 0x20001700, 0x0, 0x0, 0x0) [ 162.429911] FAT-fs (loop7): Unrecognized mount option "18446744073709551615" or missing value 17:14:23 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4002012, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000400000/0xc00000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000793000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x988, &(0x7f0000000040), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00007dd000/0x5000)=nil, 0x5000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x20000000}, 0xc) r1 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x402802, 0x20, 0x15}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="f5ee0000ffd61af6a0172539964c040000007684e520dcbf55e7f53010d06b452d0363e10dfd8920e01aa53094c942ca5488a2d3c4eb10dd485e9ccd4de350b3dbaa7f68cce6c8b51c", @ANYRES16=0x0, @ANYBLOB="0008000000000000000010000000080001007063690011000200303030303a30303a31302e300000000008000b00010000000600110002000000080013009600000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000060011000000000008001300010400000500140001000000"], 0x90}}, 0x4040) syz_io_uring_setup(0x4877, &(0x7f0000000480)={0x0, 0xd319, 0x10, 0x2, 0x2a4}, &(0x7f0000e0a000/0x2000)=nil, &(0x7f0000ef9000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) [ 162.474958] nfs: Unknown parameter '®fat' [ 162.480219] Process accounting resumed 17:14:23 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 162.588318] Process accounting resumed [ 162.595162] syz-executor.7 (4167) used greatest stack depth: 23664 bytes left 17:14:23 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x189) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x125d, 0xffffffffffffffff) 17:14:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1e0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003005e000100062d00000000000000004000000300000000ae01000000000100000000000000380001"], 0xa78) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 17:14:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x38, 0x9, &(0x7f0000000640)=[{&(0x7f0000000280)="ee73835d62af19d9c4def8aaf4d5fff2cd0226f10cb2366465ad5d18ec589e38dc5f9effcc4774c10e0aff1d67fa94af02778e120fd22a3d246bd0bdc21b587bde1d747c384c39efd0d7e3ffc8be74915d29d7b8b55d0aadaf3f7791d3e1c9648bfd79e0", 0x64, 0x4}, {&(0x7f0000000300)="6e58b1d1ca48b19bfd4f1bc3", 0xc, 0x7}, {&(0x7f0000000340)="5fd3897ed8a636400da68fc90fb994e1108b5137f7b34382c4772fccdf47774b50859a6ac412569afd482f4a7a988b5461879dabb0c5696906784b23f7e5695c9ea7f12de695e3c8bf1316d1bf65cdace01a2ac9af6dbddcbc74", 0x5a, 0x3}, {&(0x7f00000003c0)="9b6b3a7f53d2e691889ee90426d6dff814d08ae498f1a627900dacb691b629a6d6454531b37ab3d5fee93cf09495eef614", 0x31, 0x4}, {&(0x7f0000000400)="b49805ac88df28df56d476a55455ecc53d4aa234d7a8f859a0aa7c84e61bb1c38e14da0a8d90896f8aee10131110ace71f9bb77ee5e93040660f452b6a5871d14d22271441f85164c113dfd91900477ae21c8f8ef6445aa0e2c67c1c30731ab60f68fd7531e670c76b8a9edd8863490cfe481c832eb28e6a7f4576ae8d174e7f4912d8269a25fbb27062cc3db51cf43f57714271", 0x94, 0xfffffffffffffff9}, {&(0x7f00000004c0)="ef75cfe4c6dbc7770883f8fdcfda73cc382535a53ffccb8d93b284d65c1144fa56af7c19", 0x24, 0x1}, {&(0x7f0000000500)="75cff7949454197622ff981dfe0ceb11175190c6ff57de187acc5bcadbd18fdbeb5548b4f61697ebdc56b86dd1118f582a06b7039b2f6395dfce3e572cee18d4", 0x40, 0x98}, {&(0x7f0000000540), 0x0, 0x180000000}, {&(0x7f0000000580)="9642d54b037d43c417cc0e81dcb527b61a45055175e533898e39ee04ee2a19ed4f5427c6c9e162e423f3d901ec65942fda93a38e19724b962b1bd20916f84432c439d1e6cc37acdf8f79a87b4fe3937c41647be977e8dbc51a681adc2c7a1fcae219b0ec5a8d87316a19d946490a0a489cb9f2e6d9513d5021f5d7ef589a8d0f9a3985f31327a1ee96e8", 0x8a, 0x3ff}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) acct(&(0x7f0000000180)='./file1\x00') r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87b2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x204a00, 0x62) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = fcntl$dupfd(r6, 0x406, r4) pwrite64(r7, &(0x7f0000000880)="71a6675d8190a42009bff7f992954e464ffa0ed1c703be413484385aedc902ad2076fd0af0afd9b1b069668b950b01f5f40a67bf3b7df70aa446f71c6672c588d96acf0a9789b0faf9cb2ed8125f9606ba8d4b1fa297791eb1471f554ab764bcad9c067f1c5da0d8a605377f2946507c3456103394de3b9c2f6e27ce8ead1c5498b884e078e1a2255f55d3", 0x8b, 0x3) fcntl$setstatus(r5, 0x4, 0x2800) sendto$unix(r5, &(0x7f0000000780)="7c110d0e62097f6cfb746f7031410321bdbcc49d6f37502341aeffb884f1f875247b6115744a8e061d8dca75c72404a8aa63781772af54ec1beb2a91ed96e27c9f555bf9175b15ce225bad5ae4bba105a77ce320207d8c16b7a3182e6c437ef73e2bb0222398b14cd3c91283dab0297ab330c93401598775c828423f5d430c054f8b6aca82aa7a97e24b8173fa9c54ecb3bb60cbe27bb75570b35e4a2728d22fa141dea5fd3edcf078bb83eee2b19e5d9b2ea10a0d4038da85f3957e6ce59dfcc20b3518d8bf6817692f1140efc9d5", 0xcf, 0x0, 0x0, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181140, 0x20) sendfile(r3, r0, 0x0, 0x100010000) 17:14:23 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'foc\xbc'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) unshare(0x40000400) 17:14:23 executing program 2: unshare(0x60040000) unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 17:14:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8804, 0x7, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x4004800, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 162.762462] FAT-fs (loop0): Unrecognized mount option "=Ÿ77<&¬4.Ç" or missing value [ 162.768171] FAT-fs (loop7): Unrecognized mount option "18446744073709551615" or missing value 17:14:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x81, 0x7, 0x2, 0xffff}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f3ecef71314bee83db3870565a85b66e277cc548880e25697fd7a972a9b4291deacaa63ccf78d10a94bd84ddc8e332a4635fe045b3e611bf37ca3dde83ec01c13eceb1c9d2c25afedef164d8c91343c4a516861b92fb1bafe5d5f918c8fe16ea0f92e8a5c9e5665bf43fbc72eaa3f09e2935a1730896abb0c78235341750a7895be212bfaf8942ed7d2b240b8acc5a97972f5e5309cdc4a0f93c58cf8ae919b8ac491084a863595400ddd445476399c205e9aa91c53a78ad16a5c425c62794"], 0x24}}, 0x0) socketpair(0x1e, 0x299907ed497346a8, 0x4, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x1) [ 162.853544] nfs: Unknown parameter '®fat' 17:14:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)={0x200800, 0x80, 0xc}, 0x18) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 162.977664] serio: Serial port tty28 [ 163.182921] Process accounting resumed [ 174.687853] kmemleak: 51 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:14:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x8010, 0x0, 0x0, 0x9, 0x0, 0xa79}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0xc00, 0x23) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 17:14:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x43, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000080)={0x7ff, 0x0, 0x0, 0x80000000}) ioctl(r0, 0xffff76ba, &(0x7f0000000000)="ac205e7715f46ed8035193c5cd7e264b971eecb1763b692d69814e9e740ddf0d612dd4556d28cc7a724b369586268ed34e65dc2e6ee4418408") 17:14:42 executing program 4: ptrace$setsig(0x4203, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0xffff, 0x1, &(0x7f0000000900)=[{&(0x7f0000000800)="89d07f500b0638225ac9bb595b4ec8fd7767edf97650f3f1ce1c6d22b9325bb3c03b1a536d7b793c3daa10c84a94a6a0315978bd2ffb3a6ea1f1907c7ae2d2660ffb70d87895f2ada0c85a4e5284d0b62537280a584527a474e3e0a128bab965d2e59fd0aff8fd2e80212bce1e8c4bf6f0e44de18ae10ff18b7f6b7f60936b2c153416e22c077c57dc7650641600b80dc3487a9959c75a8c8978036578df6c5aa208a3db86371703840ccc273536e7dc33f617ba93e65fd5fa1e485903f93452c925ba564cfff0e212334ae196fede62fc0550e8e041c94999c697f2f633b44399c4991c334c8824e567a65a2ed48795d26907e509", 0xf5, 0x81}], 0xa000, &(0x7f0000000a00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x36, 0x6d]}}, {@size={'size', 0x3d, [0x74, 0x35, 0x2d, 0x6d, 0x74, 0x34, 0x37]}}, {@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x2d, 0x3a, 0x39]}}}}, {@size={'size', 0x3d, [0x33, 0x38, 0x70, 0x35, 0x39, 0x74]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x4246}}, {@gid={'gid', 0x3d, 0xee01}}], [{@uid_gt={'uid>', r0}}, {@dont_hash}]}) syz_read_part_table(0x0, 0xa, &(0x7f0000000680)=[{&(0x7f0000000100)="b79aad432628b2b5c8ddc4d5bd2d322e022f0c2ed3d872322271cd74f63e6e0f1fa9f291a4a33c2fd6f143612635d2b615688a75ec797ade2e09739ed711759b6b445dfcff233d86ddb23f9bb1ad4ce201c2a8f7483474347950b10de78b0edc3781cfc616a22fbbc10bbf2c51738255c1e718b6e423cdc68c65baa333257f1414c10cbc9ffc0c9f7bd5e0f8b32423a403ca2312d0af2ccfe724a4db7d0cb28f66af1d453110901f13823f8c2e", 0xad, 0x8}, {&(0x7f00000001c0)="8913586c456cf7fb0e445998d1c32b19682988dbc392093342c57e01a86ae4ed40581d2ec0b89aa083c7f8eb36c03c3912b530f6c64f7ee071d580a35d6b4c7eb09c9a36527397b529e51973ca9c3a5fd1fa1fd46aac524832ed45e80326e232deb7009c089f88530cb78d53c4cde80c647312c173b993c3c2ff53b6bf113c2867885a712bad568561ead40f481ba6d817fb3e3ac9b49a1e92043d32665549616c8b9a30166545d5b22c9b0155c0e9bb79bd5a82a22e50166e", 0xb9, 0x6}, {&(0x7f0000000280)="6b48f9a03a44bad1d5a066293cd24d105957c0b42fcc71e57469c7f75f087202d3c2e0a488672f403861024b", 0x2c, 0x6}, {&(0x7f00000002c0)="87ed658bb3d4d70d87730807e541c1a6cce8844dc2b72ff4109c279465e3c1", 0x1f, 0x7ff}, {&(0x7f0000000300)="46c4d7a558e8de35871203da30379fcc71a4d5c612b1e2e9ed32b68a485deb1ca333378a1a38f1a82244fbfff2b51421208f2ac146b7f52d62e243d5eb0df6fc7931608018", 0x45, 0x9}, {&(0x7f0000000380)="58396580d9173224e9114818e09710a3e40781fb455f4eccf5face33efe76d4f7e28f8c89ef4e7ff3f8ceaa022b0ed510a3cc1a4750503f35a108614e99c3fe0d6f8a6b1f4cd13996f891f41620eda3b0302e55a9e3161efbd93ecf07df36fa34655dd19f9fd708cd4d0a778d0927da5e106a7567c91c7483a8ad336efbda26b48f7ea05333cbd0471251048be57c803e1ee854304", 0x95, 0x8001}, {&(0x7f0000000440)="9e73733ee3b4440843ce1e87717d68d8a8b19e363a84b6f8b5dd7888b08892017cfcdfcdc9595a08d1934554f57db05df2fb8e545a44cf3cc7e796c2ddb1d111d6920854107a8252507cbb2bc910bba483882d275dbdf663e9e44b5a0f6172ced93fe430668ecd3d5d79e941bf6ee4771c96d71db7662843fb2064422e77d89831b126abff6d31069b88deab2ac4fa3f654dc154a89b25094165afdc2621f29547a27bef56356e113f62c555305a7e96ee8713c33d8fb51aaf4577278abb4a02962e47ba8f381f6c196e5330a6ad633687326546a994d8", 0xd7, 0x5}, {&(0x7f0000000540), 0x0, 0xffff}, {&(0x7f0000000580)="98389f6036c80effa357c0fd4d341c6b88851f71fdbf405e239c9db60d8a8799c5f7ceab50baff2ec727b5e17c1837323f386f3a668111b7ac937a863e9c63c18845c637d04964b85e7361714994c1b9627bd36607359a06188c3334ef57a6ad0987f3f0eee1659f379d8a67df6197ee8a5a35bd7dd195f940f245405d1c6e5a1df84fc70d60ab24cb7a81892a75ad53a4e2b562c7764781e7524ccd76ea29", 0x9f, 0x2}, {&(0x7f0000000640)="1ca98f22790e11c8a3a06891b6c1d0534d08f63e5702d575c82b50cb881da5098903366b33af71ebd066cf", 0x2b, 0xa824}]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000048c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8fbb4b46298413832680e30", @ANYRES16=r1, @ANYBLOB="02002bbd7000fddbdf253100000008000100110000000c009900060000007a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006502000002000000"], 0x3c}}, 0x800) 17:14:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="3d9f8f37373c26ac34131c2ec7"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 17:14:42 executing program 6: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x34000, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = syz_open_pts(r2, 0x793fc0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/102, 0x66}], 0x1, 0x3f, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000300)={0x1, 0x95e, 0x1, 0x3, 0x0, [0x7, 0xffff, 0x7fff, 0x8]}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) fcntl$setstatus(r4, 0x4, 0x2800) syncfs(0xffffffffffffffff) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000000c0)=""/146) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r5 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) pwrite64(r5, &(0x7f0000000340)="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", 0xfb, 0x7f) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0xfffffffffffffffe) 17:14:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0x9fe}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="1692720e3b6c7e4dea080d7751122037990708c14512d5ffdc372bf9eea3451c900528fb7f3896451c9e3c61614819235272b7fecbdb19b8d38b8d4250afc2e0991996a2385780926db91fbaf8bfaecebf3dfb83ef91fb68319b53f57f332743a979baebda75af3db3cc9526fd6516d87f6da614bccf7b704652242e0842facdfd8b3667d73617616b3073d5fd1dbf155f00ff33f74332affb56796ef1e11e3878c45eb586b6fe", 0xa7, 0x3dd}, {&(0x7f0000000300)="eb0e05502a0653cac8873ff0137b7806802858da2a3889f5ec92c16b35b00146ac38e800c8f57224171b2c7be5e4646e61409b4375930034cbfc3c80005cc39b94f4effec6a3b1ee18c6f11d4674c8e6a3bf9ae8e529bef149f5cea9d61030c905ee1ad1168ab569bceadb25ac4c64858f06d56273077c3b8044ff739174e41e86dba9f8afac9d7f38d181872cde23ec5b62c26ba467350e82cd34e0927848691cd16882618e2ce074e81914e9ed0241c4d03921dbc7f66de9c4f583c91cd02de24bb7746b81b05d5e5dd45928e557d7436d31c25cb5e91469a94552b2", 0xdd, 0x6}], 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB='bh,noquota0x0) io_setup(0xffffff01, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) r5 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r2, 0x5, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xff, r3, &(0x7f00000000c0)="1370bb4e6f8fa9553a6ea87f989bb611b1d69ede65c4e25ac2d00c305d63e6e136a901e2b9404a3d731b7b658182130e872870d00878105025b33e14e9c92182115b349721e7606e5ba41c3d71", 0x4d, 0xfffffffffffffffc, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000180)="375028d71bd5374bb185722f0567da5ce7465892114cb33720bca10eabbd784d0fb6c03e5598604d1dd3e27bf70d26", 0x2f, 0xffff, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400, r5, &(0x7f0000000340)="ffd98c5cc8e7074b74ef48180c8ae940eab8431d0f9d522809cdc2c32b072cbf6d67d3c4a65c2dbc5f491011942b6681430e10a57c6420b33346870489e15ccfc907496fecad4960854bb7329e8cf5dfe1f4dfe08dd860bd22be1f393b6a1d7ae3e0cd17f2cebf2cc2c383bafccc6db6f296a16f3ed238cc65970bdf7836887fc71ca96ea10bfb8837c41e533c8d981fa75f0424fdc7989ea1a56f6b102184173ebccbfdb0d836e46d8c4948f90caabcc500ea4887c8f22aadc3858e981bb79ca13bca8949", 0xc5, 0x1ff, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xa6, r6, &(0x7f0000000440)="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", 0x1000, 0x7, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xf14, r0, &(0x7f0000001440)="a7468aeb7a017b85dd577f8845f33bde538b6b61bd38ff0969eed7785004f2b81761c08298ac031dd7bac863c96441cb2b80c81b3210b85210f41fc35756f86aba637d91a118499f5be3903ba5ddc110daf548a9d20b9bb114c15ac449b876e5b369ec46cad0862ae542a6029546f9a269adc7fd34c7d4f2806633eae9b1b7f66ed3acb9c3724229b0d54cce8dd7368ac83b940cff2c88d19e8abcd429237bc051a867440cea715b22e97f188bf18b60a3446867b6849bdcc862c4b299a9c9cbe04440be22a2d08bbee5", 0xca, 0x2, 0x0, 0x1}]) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) 17:14:42 executing program 7: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3d, 0xa0, 0x2c, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x218, 0x9, 0x5, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xf8, 0xfc}}]}}}]}}]}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x14) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x4) syslog(0x2, &(0x7f00000001c0)=""/25, 0x19) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x0, 0x4, 0x98, {0x98, 0x0, "713c6c12a4899b31ba021ee9128d60b498459794ce1d4f63de86274767a995fd3fca13010fcb3f41754d718ad0a4b60b3eb4e5ebd2a4bd3f1da72fa2a79cc31f9616b5ddc5356afd5234f4718250bcf5a44ccec1aebab0493583be9211cb90a54e951855739454756b5ef2c92e24ba77697b3d87af6d06d9e9873b0b64cd48fc6f817968f5293c8c90ab08e718893876416c8168d976"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000680)={0x34, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x33}, &(0x7f0000000500)={0x20, 0x0, 0x2}, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fork() sched_getattr(r2, &(0x7f0000000080)={0x38}, 0x38, 0x0) [ 181.293701] udc-core: couldn't find an available UDC or it's busy [ 181.294596] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.324550] FAT-fs (loop0): Unrecognized mount option "=Ÿ77<&¬4.Ç" or missing value 17:14:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file1', [{0x20, '@'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '\\{.:^)'}, {0x20, 'z.%@'}, {}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}], 0xa, "f504d44944cb12fe79843907e917280a38df4ec914690332f228437399d3487761cd1b135e782eff56b369c7bc8aec7fea2d1ebd9bd477ea270e083e712f80ead3520e44363b72ed92cda4ad11073ca5f9"}, 0x83) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="61b05ea5ae39f41868eebfc644a2038938447a9382a75d5dcb6433ca0bea73b8f805371a8af98b9a9d08e5dd98597e304c6bdc3aad15c000e067881682467dd02b32b67aa1543310fe50d1848e8cb600afca221c6d17581e7f92775359d69e8fb9b545f5ad85696e442569b998bff58ee37eecf190b7ed11fe24f80d37ecbc836642587c7d131c1fd4057e1eaf35d67b7a156307eb27efc5"]) r1 = dup(r0) close(r1) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) 17:14:42 executing program 6: r0 = syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xc6da2cc48daca113}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000380)=""/39, 0x27}], 0x2, 0xef800000, 0x401) io_uring_enter(r5, 0x28dc, 0x1c12, 0x2, &(0x7f0000000200), 0x8) syz_io_uring_setup(0x7d31, &(0x7f00000002c0)={0x0, 0x1761, 0x0, 0x0, 0x20, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) r6 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) io_uring_enter(r4, 0x4e6c, 0x8079, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="2aef45f2c0df4fca6d4f6de4bc2b4458b7acf962b7c446916de4b4f0534b2639f7c496dd240d11c51dab21d01a7d6877ece53fc839bc44ecf1774a72c25af2499b8976d5adeb450aefdf25527a9dd38e77b3f4ff86ccbfca715dea9422dae5002613725e", 0x64, 0x10001, 0x1, {0x0, r9}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:14:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8100023f}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4a000, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) setxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'trusted.', 'nl80211\x00'}, &(0x7f0000000500)='nl80211\x00', 0x8, 0x1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c5f000000d4451cbdb406b80744c33c9828e0124ebe", @ANYRES16=r3, @ANYBLOB="00082abd7000ffdbdf25090000000c00990001000000150000001100070045e0e3925a10c879922a10eadd00000028005080100008800400010004000100040001001300040006b12a66ee53f47990c74c673c0e2700"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2c084) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x20000000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000180)={0x155, 0xa, &(0x7f0000000580)="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"}) write(r5, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xb06ae7968a8641d4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:14:42 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) poll(&(0x7f0000000080)=[{r0, 0x5}], 0x1, 0xfffffbff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xfd) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x39, ""/57}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15d}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) syz_open_dev$sg(&(0x7f0000000280), 0x8, 0x6000) r3 = dup3(r0, r1, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) [ 181.581889] FAT-fs (loop5): Unrecognized mount option "a°^¥®9ôhî¿ÆD¢‰8Dz“‚§]]Ëd3Ê ês¸ø7Šù‹šåݘY~0LkÜ:­À" or missing value [ 181.669641] device veth0_vlan entered promiscuous mode [ 181.771094] FAT-fs (loop5): Unrecognized mount option "a°^¥®9ôhî¿ÆD¢‰8Dz“‚§]]Ëd3Ê ês¸ø7Šù‹šåݘY~0LkÜ:­À" or missing value [ 181.847595] udc-core: couldn't find an available UDC or it's busy [ 181.848578] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 191.200637] kmemleak: 27 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 191.844507] Bluetooth: hci4: command 0x0406 tx timeout [ 191.845437] Bluetooth: hci1: command 0x0406 tx timeout [ 191.846327] Bluetooth: hci0: command 0x0406 tx timeout [ 191.847666] Bluetooth: hci2: command 0x0406 tx timeout [ 191.848495] Bluetooth: hci5: command 0x0406 tx timeout [ 191.849291] Bluetooth: hci6: command 0x0406 tx timeout [ 191.850459] Bluetooth: hci3: command 0x0406 tx timeout [ 191.851268] Bluetooth: hci7: command 0x0406 tx timeout 17:14:59 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) poll(&(0x7f0000000080)=[{r0, 0x5}], 0x1, 0xfffffbff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xfd) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x39, ""/57}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15d}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) syz_open_dev$sg(&(0x7f0000000280), 0x8, 0x6000) r3 = dup3(r0, r1, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 17:14:59 executing program 5: r0 = syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xc6da2cc48daca113}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000380)=""/39, 0x27}], 0x2, 0xef800000, 0x401) io_uring_enter(r5, 0x28dc, 0x1c12, 0x2, &(0x7f0000000200), 0x8) syz_io_uring_setup(0x7d31, &(0x7f00000002c0)={0x0, 0x1761, 0x0, 0x0, 0x20, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) r6 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) io_uring_enter(r4, 0x4e6c, 0x8079, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="2aef45f2c0df4fca6d4f6de4bc2b4458b7acf962b7c446916de4b4f0534b2639f7c496dd240d11c51dab21d01a7d6877ece53fc839bc44ecf1774a72c25af2499b8976d5adeb450aefdf25527a9dd38e77b3f4ff86ccbfca715dea9422dae5002613725e", 0x64, 0x10001, 0x1, {0x0, r9}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:14:59 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) poll(&(0x7f0000000080)=[{r0, 0x5}], 0x1, 0xfffffbff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xfd) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x39, ""/57}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15d}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) syz_open_dev$sg(&(0x7f0000000280), 0x8, 0x6000) r3 = dup3(r0, r1, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 17:14:59 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/187, 0xbb, 0x2000, &(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) 17:14:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001000028", 0x5d, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f0003", 0x11, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x706, 0x1000}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}, {0x0, 0x0, 0x800000000007000}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x80000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r1, &(0x7f00000000c0)}, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) ioctl(r2, 0x7, &(0x7f0000000040)="9577de0d1b599b41") 17:14:59 executing program 6: r0 = syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xc6da2cc48daca113}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000380)=""/39, 0x27}], 0x2, 0xef800000, 0x401) io_uring_enter(r5, 0x28dc, 0x1c12, 0x2, &(0x7f0000000200), 0x8) syz_io_uring_setup(0x7d31, &(0x7f00000002c0)={0x0, 0x1761, 0x0, 0x0, 0x20, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) r6 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) io_uring_enter(r4, 0x4e6c, 0x8079, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="2aef45f2c0df4fca6d4f6de4bc2b4458b7acf962b7c446916de4b4f0534b2639f7c496dd240d11c51dab21d01a7d6877ece53fc839bc44ecf1774a72c25af2499b8976d5adeb450aefdf25527a9dd38e77b3f4ff86ccbfca715dea9422dae5002613725e", 0x64, 0x10001, 0x1, {0x0, r9}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:14:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x8010, 0x0, 0x0, 0x9, 0x0, 0xa79}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0xc00, 0x23) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 17:14:59 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) poll(&(0x7f0000000080)=[{r0, 0x5}], 0x1, 0xfffffbff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xfd) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x39, ""/57}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15d}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) syz_open_dev$sg(&(0x7f0000000280), 0x8, 0x6000) r3 = dup3(r0, r1, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 17:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="2c7766646e6f3dc60159f05f4e9160d292f189a2afc86175432f1d93766a165efc5a623659dde6e0ac906ee88de2eef513262473254d358b2ffcfdceb4d2448d7a8decb531", @ANYRESHEX=r2]) r3 = dup2(r1, r0) mknodat$loop(r2, &(0x7f0000000080)='./file1\x00', 0x200, 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="0565c7b8dd50d103cac5688d6f81dcb7254a2a92a124b474b41ae74517abf33bd46c0993b14c49b69799b0781254a9ef7447c321bbd332eedf6dcc3029d2faab520206ed1e0ecee4812be7578c62344393", 0x51}], 0x1, 0xa) 17:14:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, r4}) dup3(r1, r0, 0x0) [ 198.202299] device veth0_vlan entered promiscuous mode [ 198.221090] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 198.238481] 9pnet: Insufficient options for proto=fd [ 198.248818] device veth0_vlan entered promiscuous mode [ 198.252276] 9pnet: Insufficient options for proto=fd [ 198.266291] device veth0_vlan entered promiscuous mode 17:14:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xff, 0xd44) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 17:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:14:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x42, 0x0) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0}]) 17:14:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x323d1113}]}) openat(r0, &(0x7f0000000000)='./file1\x00', 0x482002, 0x20) 17:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:14:59 executing program 2: r0 = syz_io_uring_setup(0x1553, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x4) r3 = epoll_create1(0x0) syz_io_uring_setup(0x52ba, &(0x7f0000000180)={0x0, 0x6cba, 0x2, 0x3, 0x1ed, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) r8 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="b94cc54111d70895717bdc0c2245ba0f185358ddf0eef2f1858cf9e444966dcd4bb71b937b579bdd6f092b6290b631f20ae99622d98b22a5fee675d764e71632d140da04b11483dc35deb3d1ff7a48f6f0235f73617b3c9173fc3b2af4d7bde244b778b0a00ae4b00994e873a6686c15869367d06d4c7eeaa9b6178b246452b91b03ebe8412c50df8148082b54911ec105b449c671d8418c87a9916beac4d9e8b7126c", 0xa3, 0x8}], 0x6000, &(0x7f0000000580)=ANY=[@ANYBLOB="042c002c002c292c002c002c6f626a5f74795372616973652c00419fc8603acea117af83553b1e40b60048e9dc00f3cde83018570e3e24343e65322a5315ae918c4000000000000000a63db179f53a17d49ace5697007f8c537c5b19f570e3015c2e480a0e"]) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r10 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r8, r9, r3, r10, r3, r0], 0x6, 0x0, 0x1}, 0x8) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r11, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x807c90) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:14:59 executing program 7: r0 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="fca6de1b0414f1ca6ce9c73f11341905a9a181c99059177c8638017a2cdf81681b23075bfb5da133f93fb97dd8583073132199f9b99d246430fc4bc4053a2933dd111a332a2b1a43d15dbaebf13081aae88e8a1fae6215ae9bc87688ad97243e4038f95b7ef18c5b12e366c9f0e38b612204f4ddfc129ab1d19c4f831f9ea1e64c688b614c0508ed4a4a7419cde6340c684a91ddda4c437c7817c837ba8a8283215cb327847105c57c7bf8cf00e85e152bf38126b36d021ccf", 0xb9}, {&(0x7f00000000c0)="e56093e26e986174b7e86bfaca074ba15b56c6b5c084c3b3186aae6a4bbb4431e4b03cfe75b7bbf9d5cf39a9a4679642f93de05ab06889c2905928561793303e35dcb4dc4107e9fb8e539bde2de354e923f8f8d55ab2d9f76e16dc34e1de41db332df091aabca85ac4870dc1e5e94ee8029dc1bd8ac683df77c2ae2ced251f3f399b8e75de0072ad3986cdcaf315090b48190cd1c4147fd09400534708f79b68ce3787ec53dca98f903965f0e4e8e2138d380252f7683ca83b10428bc53575277199edc2a0fe3fc96e5e7d4708439138624b18f285b6f63209c9", 0xda}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f00000001c0)="bfe70c55d1cf581b47183d5bbcbd21f40e684c96891d50820faa14e961cc36a0f8ff420ded0f954a5db864e5a9c2b0bcfe8e79592c6a276ee84bff545b7519f0b6e050fb84fe28a7b64126a2cba8eb5c36c2c2979a4232", 0x57}, {&(0x7f0000000300)="90a2b5408886f8a12facc6534b990033cc6c73a98da0cff8ee2b8c16738a69ef22012c4c939438460201fb3c2bc6e87d3cc20fb2552250d4192abd30e279602ef479bf60e9c17591d0180074863e3bb666664d", 0x53}, {&(0x7f0000000280)="a90344457051506def3f15", 0xb}, {&(0x7f0000000380)="37858eb1ec6392291cc98d407619e21c1a7385968d4617225f5bf7c22ac6eaa36443", 0x22}, {&(0x7f00000003c0)="9acb70327f3f0b4df2b082e94eb9ecd301db8da163b0942dda421c04e7d89612843792072916ba3c3c794c4012d1c0ea41eaae8dd235dc23a9078707ffd84d1c008dc634a10b861ac3368d4eea85f9cf4491466d01ee8f53a63732157a16212e1507b8323c9bfd75d694d4cfcc2bb9acd8c05922055cb941075874836b8cc0e8554c886801531a3ad9bd367c67568cd544e4da118cd012db174e3c7812871a0197ae1a677ed0f9c6d9b976532e35f097a92b31573e7604f64756a0e88f14c7bbb0d4b426bc2eb0e25427", 0xca}], 0x8, 0x2, 0x7, 0x12) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001600)={0x1f, 0x0, @none}, &(0x7f0000001640)=0xe, 0x1800) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c0000000190001000000000000000000fc0100000000000000000000000000002001000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) 17:14:59 executing program 6: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setregset(0x4205, r3, 0x201, &(0x7f00000000c0)={&(0x7f0000000000)="37731f5fc1d58c4dd89b404f1496ff873a7c7c280f7c95f30e75ee8ea4be9cd852e409a04642289ca45143bdb4e66907421d3a6e681fe79173661fcebb3823c1aa855cd800b5efa606b8cab3d8d412610b72995bb801c89ba5cfb6cb3cdaa177fddf8fe212be15c9f3d9ff704692b8290206fc8102885d41a1e9757ae1face0af33d85edef58af824b74b35501c4d04aee31e3cd297cacca64a6afd0b0", 0x9d}) [ 198.667655] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value [ 210.302090] kmemleak: 46 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:15:17 executing program 3: r0 = syz_io_uring_setup(0x1553, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x4) r3 = epoll_create1(0x0) syz_io_uring_setup(0x52ba, &(0x7f0000000180)={0x0, 0x6cba, 0x2, 0x3, 0x1ed, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) r8 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="b94cc54111d70895717bdc0c2245ba0f185358ddf0eef2f1858cf9e444966dcd4bb71b937b579bdd6f092b6290b631f20ae99622d98b22a5fee675d764e71632d140da04b11483dc35deb3d1ff7a48f6f0235f73617b3c9173fc3b2af4d7bde244b778b0a00ae4b00994e873a6686c15869367d06d4c7eeaa9b6178b246452b91b03ebe8412c50df8148082b54911ec105b449c671d8418c87a9916beac4d9e8b7126c", 0xa3, 0x8}], 0x6000, &(0x7f0000000580)=ANY=[@ANYBLOB="042c002c002c292c002c002c6f626a5f74795372616973652c00419fc8603acea117af83553b1e40b60048e9dc00f3cde83018570e3e24343e65322a5315ae918c4000000000000000a63db179f53a17d49ace5697007f8c537c5b19f570e3015c2e480a0e"]) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r10 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r8, r9, r3, r10, r3, r0], 0x6, 0x0, 0x1}, 0x8) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r11, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x807c90) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:15:17 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x100, 0x70bd23, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0xc010) r1 = syz_io_uring_setup(0x7140, &(0x7f0000006480)={0x0, 0x7942}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000006500), &(0x7f0000006540)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x50, r1, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x10000000) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r6, 0x4, 0x2800) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180), 0x3) 17:15:17 executing program 2: r0 = syz_io_uring_setup(0x1553, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x4) r3 = epoll_create1(0x0) syz_io_uring_setup(0x52ba, &(0x7f0000000180)={0x0, 0x6cba, 0x2, 0x3, 0x1ed, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) r8 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x1, &(0x7f0000000400)=[{&(0x7f0000000340)="b94cc54111d70895717bdc0c2245ba0f185358ddf0eef2f1858cf9e444966dcd4bb71b937b579bdd6f092b6290b631f20ae99622d98b22a5fee675d764e71632d140da04b11483dc35deb3d1ff7a48f6f0235f73617b3c9173fc3b2af4d7bde244b778b0a00ae4b00994e873a6686c15869367d06d4c7eeaa9b6178b246452b91b03ebe8412c50df8148082b54911ec105b449c671d8418c87a9916beac4d9e8b7126c", 0xa3, 0x8}], 0x6000, &(0x7f0000000580)=ANY=[@ANYBLOB="042c002c002c292c002c002c6f626a5f74795372616973652c00419fc8603acea117af83553b1e40b60048e9dc00f3cde83018570e3e24343e65322a5315ae918c4000000000000000a63db179f53a17d49ace5697007f8c537c5b19f570e3015c2e480a0e"]) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) r10 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r8, r9, r3, r10, r3, r0], 0x6, 0x0, 0x1}, 0x8) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r11, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x807c90) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:15:17 executing program 5: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x81, 0x3, 0x82, 0x6d5d2794, 0x8001, 0x1ff}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10804}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000bde670325132510000e67032510300000000002e2e2020202020202020201000bde670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000bde670325132510000e670325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) 17:15:17 executing program 6: removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00') 17:15:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:15:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) pread64(r4, &(0x7f0000000040)=""/63, 0x3f, 0x1200000000000) fcntl$setstatus(r2, 0x4, 0x2800) clone3(&(0x7f0000000200)={0x31081000, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) pidfd_getfd(r5, r0, 0x0) 17:15:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0xcf59, 0x8, 0x3, 0x26e}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_mount_image$iso9660(&(0x7f0000001b80), &(0x7f0000001bc0)='./file0\x00', 0xfffffffffffffffc, 0x3, &(0x7f0000001f00)=[{&(0x7f0000001c00)="032ec98b9a24315b66f74bd4282dc66701cf914e0cd47360fa632ccdda9acdfec500981d459cc6f141fced17ba1fb82312cf7cd7ebe3f2737ec360c7bd80e33d66e66e3b2e43180d187cab1ccc0d24fca4a5b05a2f3185a2bee92bcf49fd", 0x5e, 0x1}, {&(0x7f0000001c80)="9bf00f962a75399f7d3ce0f7c47c865f2539f6bc6aa0e3ab8e78461dd8d04b401899c0c4ed271497e4b014bb9c6cab192efc2181aba5fa861692aa15bfc8f8fb82f1ba50f9a8492462b22b94c25de4af13e4ed2e1ae4b0d043a213e2332d42f19b230eb9604e1d8fbe6da11865a0b7b434859b59adc59ffa3e5a4fc1ebd2", 0x7e}, {0x0, 0x0, 0x1}], 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB='overriderockperm,cruft,iocharset=iso8859-2,uid=', @ANYRESDEC, @ANYBLOB="2c7365636c61722fc92858b649294bf173cd99da162062656c2c6673636f6e746578743d726f6f742c736d61636b6673666c6f6f723d2c66736d616769633d3078303030303030303030303030303030332c7063723d30303030303030303030303030303030303034302c00"]) [ 216.518361] audit: type=1400 audit(1629738917.604:9): avc: denied { write } for pid=4460 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:15:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 228.327220] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:15:36 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendto$inet(r4, &(0x7f0000000180)="a92d941affb8b7217a541da94ce1993e4a3ba741103ff778827baffe22b9879b03276d93b33ac91a88832e7ae8351a44be1dff313f10a36a7f28bfe8881e459243bbe72d564cec3f2286afdc1122a25625e33dedffa971c288f9da1d8d69c38c98069961039fcf1052f9deeca10e7a60d5c4c44d222bc4316d25d6ccaf78e7a27ee5fc5b4ba8c9b82e8f2c4efda8f3e99207c235ef6506e7eeb272dc6d6fe284e7b68b2529fa74e63312818d05aa4fa3c058b5e49ddfc5dae2917f1ec40ea52fb3371a097ea96e9e6f2f9d92825cb2", 0xcf, 0xc080, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e22, 0x50d7, 0xa, 0x60, 0x80, 0x4, r3, 0xee00}, {0x0, 0x9, 0x3ff, 0x800, 0x5, 0x7, 0x5, 0x57}, {0xff, 0xd878, 0x10001, 0x41b9}, 0x1, 0x6e6bb9, 0x2, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3}, 0x2, @in=@rand_addr=0x64010102, 0x3506, 0x0, 0x2, 0x3, 0xd6, 0x7fffffff, 0xc87}}, 0xe8) syz_mount_image$msdos(&(0x7f0000005ac0), &(0x7f0000005b00)='./file1\x00', 0x0, 0x0, &(0x7f0000005bc0), 0x0, &(0x7f0000005c00)={[{@fat=@quiet}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 17:15:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e7, &(0x7f0000000580)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0, 0x2}, {0x1f7, 0x1000}]}) 17:15:36 executing program 5: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20000, 0x41, 0x10}, 0x18) setxattr$security_selinux(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x4801, 0x48) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x0) symlink(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27, 0x1) 17:15:36 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) clone3(&(0x7f0000000700)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:15:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) dup3(r13, r2, 0x0) 17:15:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0xf30b202d16d1bb4d, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0xa0}}, 0x8040) 17:15:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = fork() r2 = fork() kcmp(r1, r2, 0x0, r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 17:15:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x541b, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) linkat(r1, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1400) creat(&(0x7f0000000000)='./file1\x00', 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$LOOP_SET_STATUS(r2, 0x301, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') [ 235.904079] device lo entered promiscuous mode 17:15:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) dup3(r13, r2, 0x0) [ 235.942428] FAT-fs (loop6): bogus number of reserved sectors [ 235.943124] FAT-fs (loop6): Can't find a valid FAT filesystem 17:15:37 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x400000) syz_io_uring_setup(0x68e8, &(0x7f00000001c0)={0x0, 0xf959, 0x8, 0x1, 0x29f, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 17:15:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00') r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x8) [ 235.981126] device lo left promiscuous mode 17:15:37 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) clone3(&(0x7f0000000700)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 236.000641] device lo entered promiscuous mode [ 236.001862] device lo left promiscuous mode 17:15:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@version_u}, {@access_client}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x0, 0x32, 0x64, 0x37, 0x36, 0x63, 0x55], 0x2d, [0x6, 0x34, 0x38, 0x30], 0x2d, [0x32, 0x36, 0x65, 0xa], 0x2d, [0x63, 0x33, 0x33, 0x39], 0x2d, [0x66, 0x65, 0x61, 0x61, 0x4678e15e2052b809, 0x66, 0x31, 0x36]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x30, 0x0, 0x62, 0x38, 0x39, 0x64, 0x30], 0x2d, [0x30, 0x37, 0x62, 0x32], 0x2d, [0x61, 0x31, 0x34, 0x66], 0x2d, [0x39, 0x32, 0x39, 0x34], 0x2d, [0x36, 0x30, 0x38, 0x66, 0x30, 0x36, 0x64, 0x31]}}}, {@obj_role}]}}) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 17:15:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) dup3(r13, r2, 0x0) 17:15:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0xf30b202d16d1bb4d, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0xa0}}, 0x8040) 17:15:37 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendto$inet(r4, &(0x7f0000000180)="a92d941affb8b7217a541da94ce1993e4a3ba741103ff778827baffe22b9879b03276d93b33ac91a88832e7ae8351a44be1dff313f10a36a7f28bfe8881e459243bbe72d564cec3f2286afdc1122a25625e33dedffa971c288f9da1d8d69c38c98069961039fcf1052f9deeca10e7a60d5c4c44d222bc4316d25d6ccaf78e7a27ee5fc5b4ba8c9b82e8f2c4efda8f3e99207c235ef6506e7eeb272dc6d6fe284e7b68b2529fa74e63312818d05aa4fa3c058b5e49ddfc5dae2917f1ec40ea52fb3371a097ea96e9e6f2f9d92825cb2", 0xcf, 0xc080, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e22, 0x50d7, 0xa, 0x60, 0x80, 0x4, r3, 0xee00}, {0x0, 0x9, 0x3ff, 0x800, 0x5, 0x7, 0x5, 0x57}, {0xff, 0xd878, 0x10001, 0x41b9}, 0x1, 0x6e6bb9, 0x2, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3}, 0x2, @in=@rand_addr=0x64010102, 0x3506, 0x0, 0x2, 0x3, 0xd6, 0x7fffffff, 0xc87}}, 0xe8) syz_mount_image$msdos(&(0x7f0000005ac0), &(0x7f0000005b00)='./file1\x00', 0x0, 0x0, &(0x7f0000005bc0), 0x0, &(0x7f0000005c00)={[{@fat=@quiet}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) [ 236.201143] device lo entered promiscuous mode [ 236.241737] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value [ 236.260681] FAT-fs (loop6): bogus number of reserved sectors [ 236.262022] FAT-fs (loop6): Can't find a valid FAT filesystem [ 236.287374] device lo left promiscuous mode [ 248.577077] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:15:57 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) 17:15:57 executing program 4: futex(&(0x7f0000000180)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x5, &(0x7f0000000440)=[{&(0x7f0000000200)="eba4a8fca21565b8e5774c90ac41a7615f5b704b81b77d4b4c126de830bc904fc60ef36570e16df8c2720ed498580135904f56106a8ae41e1c6201542950e1738b602972a256f49cc6b7df4a35f1e4a1dcf6498135cdfb2fa40f59520147a859a91504ceb05f418da2040f227999ee45cd7c22a906f7708f0a6ca28101c5f07d36835977b3fcfc81ca6228eb41", 0x8d, 0x202}, {&(0x7f00000002c0)="903c7a010fc3c26be251c4f12f7946cd31c0e095cc9b5edf4fcaa643c62dd0f461184df49c4f8462188262d778ec503b9812232e0b9f09ee8d", 0x39, 0x5}, {&(0x7f0000000300)="088c571067ba354840", 0x9}, {&(0x7f0000000340)="c7f6b5ba1e1519276433cd884c64a95e14c535ea79ef63d0a90a332c8c27f50ed0a1131c877297c4d3285b7ab7a43192712087952956e8e01970190fa9f3d3cdffc7fad6194a78c1cb8e0e915fae4b057a4f9ad6f43ee7d8392f4589f7", 0x5d, 0x7}, {&(0x7f00000003c0)="235c14c9d996ed7eb4a374961f951a6463480deed825ffbe6fddbc54b8931a8d6c228362c531b274fa5a6e1a56bdbbd1f22d255c390e53d94132fc53df4d4a2b81097f5676e40cd9", 0x48, 0xd3}], 0x25018, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6d656173757265dd9fb1fb50e8e4c50a7a749a709229e22c6170707e606973655f747970653d696d617369672c7065726d69745f646972656374696f2c"]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) syz_mount_image$msdos(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x4, 0x3, &(0x7f0000000a40)=[{&(0x7f0000000840)="4ceaf6e2ef29e95655ce50bbf3ac2243743f7a00ceb3a183fd79532d77165677c22a5e4a9bf0edea006e82939094195c5a0e6c25c7a50ba96c4a49708176ec280867267c4b4afc724a70b89623566753318c6591542af462b6ac8f1fbe63255018b6e1a1737c627c0ab6a056ae301265ee5a02eda0db67eba1251fd68c55c6c2ce1bb449c2904532af0f418d6f1519fee833d7a5fc11e7e7627a4177d8db96043b32a508cb5bc91753645c73b94d46b47f85810177743a62ddde03b83b47908ea7b8dd9b1533680e013d9970e606b4eee714a211e14bc2c3c25bceb1231a72b9faa610a56dc0bdadff4a979b9354581c843a9ec5", 0xf4, 0x3}, {&(0x7f0000000940)="7ff4541b3dd2cafe3a2cc5c800ceadfd8a01e50f7abb429fb001054210ba899cd907585580583a74657abd16722c07ac80ba9e0c6548643e7ad10d87b2be28c9fc4a35c5abce7a96", 0x48, 0x8000}, {&(0x7f00000009c0)="197549ba28d061fc9596c3be3dd97f49f5d1a16dcd81263b859311cc9be5f1181766cf3c2635732ac4d0902c55a1a41e0b52a5a98484746750e9e956c4c625de4669111a7a623642b5e413a8f7e0c2b687c9843355a5efa997", 0x59, 0xc6af}], 0x220021, &(0x7f0000000ac0)={[{@nodots}, {@fat=@showexec}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@nodots}], [{@fowner_lt={'fowner<', r2}}, {@obj_role}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f0000000700)=@v3={0x3000000, [{0x3, 0x9}, {0x1}], r3}, 0x18, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), 0x4) 17:15:57 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000dc94b4b0cf49470000000000"], 0x18}}, 0x40000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x41) 17:15:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) dup3(r13, r2, 0x0) 17:15:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@version_u}, {@access_client}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x0, 0x32, 0x64, 0x37, 0x36, 0x63, 0x55], 0x2d, [0x6, 0x34, 0x38, 0x30], 0x2d, [0x32, 0x36, 0x65, 0xa], 0x2d, [0x63, 0x33, 0x33, 0x39], 0x2d, [0x66, 0x65, 0x61, 0x61, 0x4678e15e2052b809, 0x66, 0x31, 0x36]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x30, 0x0, 0x62, 0x38, 0x39, 0x64, 0x30], 0x2d, [0x30, 0x37, 0x62, 0x32], 0x2d, [0x61, 0x31, 0x34, 0x66], 0x2d, [0x39, 0x32, 0x39, 0x34], 0x2d, [0x36, 0x30, 0x38, 0x66, 0x30, 0x36, 0x64, 0x31]}}}, {@obj_role}]}}) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 17:15:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="29872b7f4900"}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) 17:15:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:15:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = fork() r2 = fork() kcmp(r1, r2, 0x0, r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) 17:15:57 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x10b401, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) read$char_usb(r1, &(0x7f0000000780)=""/4096, 0x1000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x1000, 0x1, {{0x37, 0x4, 0x3, 0x2, 0xdc, 0x64, 0x0, 0xfd, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @generic={0x44, 0xb, "5df7f29861361dd92e"}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x5}, {@loopback, 0x3}, {@empty, 0x4}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xfffffff9}]}, @lsrr={0x83, 0xb, 0xb7, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_addr={0x44, 0x34, 0x2d, 0x1, 0x5, [{@empty, 0x8}, {@local, 0x6}, {@multicast2, 0x3}, {@multicast1, 0xfffffff9}, {@broadcast, 0x8}, {@loopback, 0x1}]}, @noop, @ssrr={0x89, 0x2b, 0x98, [@local, @empty, @private=0xa010100, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @local, @rand_addr=0xed4, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x17, 0x42, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @local, @remote, @broadcast]}]}}}}}) writev(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)='R', 0x1}], 0x1) 17:15:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208802, 0x1c5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2001, 0x10) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) openat(r3, &(0x7f0000000100)='./file2\x00', 0x2041, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000004c0)={0x3, r1, 0xc, 0x4, 0x2}) [ 256.864606] cgroup: fork rejected by pids controller in /syz0 17:15:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x52) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) fcntl$getflags(r3, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@rand_addr=0x64010101, 0x4e20, 0xf6e, 0x4e24, 0x200, 0x2, 0x80, 0x20, 0x2b}, {0x1f, 0x9, 0x7fff, 0xf9d, 0x9, 0x401, 0x2, 0x2}, {0xfffffffffffffff8, 0x6, 0xfed, 0x2}, 0x2, 0x6e6bb4, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x3501, 0x3, 0x1, 0x0, 0xbea7, 0x0, 0x3}}, 0xe8) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x0, r7}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@remote, 0x20, r9}) r10 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r10, r10) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000180)={0x0, 0x6, 0x0, [0x0, 0x7, 0x0, 0x7fff, 0x1], [0xff, 0x1, 0x4, 0x100, 0x2, 0x1, 0x100, 0x1ff, 0x81, 0xfffffffffffffff7, 0xbf, 0xdd3, 0x9, 0x3ff, 0x80, 0x6, 0x4ea800000000, 0x89a6, 0x100000000, 0x2, 0x7afa, 0x15, 0x1000, 0x9, 0x2, 0xfff, 0x401, 0x20, 0x200, 0x1c0000, 0x1, 0xfffffffffffffffe, 0x8001, 0x401, 0x834, 0xb51, 0x2, 0x3f35, 0x9, 0x5, 0x0, 0x7d1a6e8c, 0x3, 0x3, 0x6, 0x80000000, 0x4, 0x401, 0x0, 0x8, 0x6, 0x5, 0x10001, 0x4, 0x6, 0x7, 0x3f, 0x5, 0xb5c9, 0x4d2bf632, 0x20, 0x4, 0x5, 0x38400, 0x4, 0x7, 0x8, 0x6, 0x1, 0xfffffffffffffffd, 0xfffffffffffffeff, 0x8, 0x5, 0xffffffff80000001, 0x7f, 0x3f, 0x1000, 0xfffffffffffffffe, 0x1dd2b1fe, 0xeb0, 0x100000001, 0x7f, 0xffff, 0x3, 0x100ffff, 0x6, 0x0, 0x8, 0x5, 0x0, 0x6, 0x8001, 0xfffffffffffffffc, 0x1000000010000000, 0x3, 0x7fff, 0x7, 0x1000, 0xfffffffffffffff7, 0x8, 0x6, 0xb30, 0x7fffffff, 0x15b3, 0x21d, 0x8, 0xffffffffffffffe1, 0x6, 0x2, 0x20, 0xe8, 0xd69, 0x80, 0x2, 0xe3, 0x1, 0x5, 0x3ff, 0x10000, 0x8, 0x6]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) 17:15:58 executing program 7: unshare(0x62020400) fork() unshare(0xa021000) 17:15:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) 17:15:58 executing program 6: syz_open_procfs(0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x640000, 0x0) unshare(0x60040000) r0 = socket$inet(0x2, 0x1, 0x1000) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {}, 0x2e4}) 17:15:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:15:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 257.372112] FAT-fs (loop3): Unrecognized mount option "subj_user=" or missing value [ 269.886444] kmemleak: 25 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:16:17 executing program 4: futex(&(0x7f0000000180)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x5, &(0x7f0000000440)=[{&(0x7f0000000200)="eba4a8fca21565b8e5774c90ac41a7615f5b704b81b77d4b4c126de830bc904fc60ef36570e16df8c2720ed498580135904f56106a8ae41e1c6201542950e1738b602972a256f49cc6b7df4a35f1e4a1dcf6498135cdfb2fa40f59520147a859a91504ceb05f418da2040f227999ee45cd7c22a906f7708f0a6ca28101c5f07d36835977b3fcfc81ca6228eb41", 0x8d, 0x202}, {&(0x7f00000002c0)="903c7a010fc3c26be251c4f12f7946cd31c0e095cc9b5edf4fcaa643c62dd0f461184df49c4f8462188262d778ec503b9812232e0b9f09ee8d", 0x39, 0x5}, {&(0x7f0000000300)="088c571067ba354840", 0x9}, {&(0x7f0000000340)="c7f6b5ba1e1519276433cd884c64a95e14c535ea79ef63d0a90a332c8c27f50ed0a1131c877297c4d3285b7ab7a43192712087952956e8e01970190fa9f3d3cdffc7fad6194a78c1cb8e0e915fae4b057a4f9ad6f43ee7d8392f4589f7", 0x5d, 0x7}, {&(0x7f00000003c0)="235c14c9d996ed7eb4a374961f951a6463480deed825ffbe6fddbc54b8931a8d6c228362c531b274fa5a6e1a56bdbbd1f22d255c390e53d94132fc53df4d4a2b81097f5676e40cd9", 0x48, 0xd3}], 0x25018, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6d656173757265dd9fb1fb50e8e4c50a7a749a709229e22c6170707e606973655f747970653d696d617369672c7065726d69745f646972656374696f2c"]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) syz_mount_image$msdos(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x4, 0x3, &(0x7f0000000a40)=[{&(0x7f0000000840)="4ceaf6e2ef29e95655ce50bbf3ac2243743f7a00ceb3a183fd79532d77165677c22a5e4a9bf0edea006e82939094195c5a0e6c25c7a50ba96c4a49708176ec280867267c4b4afc724a70b89623566753318c6591542af462b6ac8f1fbe63255018b6e1a1737c627c0ab6a056ae301265ee5a02eda0db67eba1251fd68c55c6c2ce1bb449c2904532af0f418d6f1519fee833d7a5fc11e7e7627a4177d8db96043b32a508cb5bc91753645c73b94d46b47f85810177743a62ddde03b83b47908ea7b8dd9b1533680e013d9970e606b4eee714a211e14bc2c3c25bceb1231a72b9faa610a56dc0bdadff4a979b9354581c843a9ec5", 0xf4, 0x3}, {&(0x7f0000000940)="7ff4541b3dd2cafe3a2cc5c800ceadfd8a01e50f7abb429fb001054210ba899cd907585580583a74657abd16722c07ac80ba9e0c6548643e7ad10d87b2be28c9fc4a35c5abce7a96", 0x48, 0x8000}, {&(0x7f00000009c0)="197549ba28d061fc9596c3be3dd97f49f5d1a16dcd81263b859311cc9be5f1181766cf3c2635732ac4d0902c55a1a41e0b52a5a98484746750e9e956c4c625de4669111a7a623642b5e413a8f7e0c2b687c9843355a5efa997", 0x59, 0xc6af}], 0x220021, &(0x7f0000000ac0)={[{@nodots}, {@fat=@showexec}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@nodots}], [{@fowner_lt={'fowner<', r2}}, {@obj_role}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f0000000700)=@v3={0x3000000, [{0x3, 0x9}, {0x1}], r3}, 0x18, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), 0x4) 17:16:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000180)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f00000000c0)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000ff0017000007002e2f66696c65305da0856632bc86b14c45772ab3dc5220acac2f60daf66ebdcfb1a651ae5a134019c1291a3f35e9167ea600f6d69824a00f048e3492c9cb225223a45585acabca46a7e52c0ca377be860cdb2f084d4d884d1f4d1d67610817b3be47836fa446219cedc8bb"], 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{r1, r2/1000+10000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000500)={0xe, 0x7, 0x1, {{0x1, '}'}, 0xffffffff}}, 0xe) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) 17:16:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x52) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) fcntl$getflags(r3, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@rand_addr=0x64010101, 0x4e20, 0xf6e, 0x4e24, 0x200, 0x2, 0x80, 0x20, 0x2b}, {0x1f, 0x9, 0x7fff, 0xf9d, 0x9, 0x401, 0x2, 0x2}, {0xfffffffffffffff8, 0x6, 0xfed, 0x2}, 0x2, 0x6e6bb4, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x3501, 0x3, 0x1, 0x0, 0xbea7, 0x0, 0x3}}, 0xe8) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x0, r7}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@remote, 0x20, r9}) r10 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r10, r10) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000180)={0x0, 0x6, 0x0, [0x0, 0x7, 0x0, 0x7fff, 0x1], [0xff, 0x1, 0x4, 0x100, 0x2, 0x1, 0x100, 0x1ff, 0x81, 0xfffffffffffffff7, 0xbf, 0xdd3, 0x9, 0x3ff, 0x80, 0x6, 0x4ea800000000, 0x89a6, 0x100000000, 0x2, 0x7afa, 0x15, 0x1000, 0x9, 0x2, 0xfff, 0x401, 0x20, 0x200, 0x1c0000, 0x1, 0xfffffffffffffffe, 0x8001, 0x401, 0x834, 0xb51, 0x2, 0x3f35, 0x9, 0x5, 0x0, 0x7d1a6e8c, 0x3, 0x3, 0x6, 0x80000000, 0x4, 0x401, 0x0, 0x8, 0x6, 0x5, 0x10001, 0x4, 0x6, 0x7, 0x3f, 0x5, 0xb5c9, 0x4d2bf632, 0x20, 0x4, 0x5, 0x38400, 0x4, 0x7, 0x8, 0x6, 0x1, 0xfffffffffffffffd, 0xfffffffffffffeff, 0x8, 0x5, 0xffffffff80000001, 0x7f, 0x3f, 0x1000, 0xfffffffffffffffe, 0x1dd2b1fe, 0xeb0, 0x100000001, 0x7f, 0xffff, 0x3, 0x100ffff, 0x6, 0x0, 0x8, 0x5, 0x0, 0x6, 0x8001, 0xfffffffffffffffc, 0x1000000010000000, 0x3, 0x7fff, 0x7, 0x1000, 0xfffffffffffffff7, 0x8, 0x6, 0xb30, 0x7fffffff, 0x15b3, 0x21d, 0x8, 0xffffffffffffffe1, 0x6, 0x2, 0x20, 0xe8, 0xd69, 0x80, 0x2, 0xe3, 0x1, 0x5, 0x3ff, 0x10000, 0x8, 0x6]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) 17:16:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 276.918776] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 17:16:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)='1', 0x1}], 0x1) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000), 0x3) 17:16:18 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa3486be000000080000dfe41d96e8f996780084f6c136290e44961414006401010186060000000000000d009078000000"], 0x0) 17:16:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 277.365265] FAT-fs (loop1): Unrecognized mount option "subj_user=" or missing value [ 289.979042] kmemleak: 22 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:16:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x100188c, &(0x7f0000000140)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x200}], 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @a}, 0x7, 0x0, '\x00', @auto=[0x31, 0x37, 0x2a, 0x2f, 0x40, 0x2e, 0x3e]}) sendfile(r2, r0, 0x0, 0x7ffffff9) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) 17:16:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="18f100000000000000000000cfccffa6ea0814"], 0x18}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x9c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3ff}}, {0x8, 0x9, 0x4}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4011}, 0x80d0) 17:16:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x1, @none}, 0xe) 17:16:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r12 = dup3(r11, r1, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:38 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1ff, 0x3f, 0x0, 0x400}]}) syz_open_procfs(0x0, &(0x7f00000011c0)='fd/3\x00') 17:16:38 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000140)=[{r0, 0xa14}, {r0, 0xc084}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x609e}, {0xffffffffffffffff, 0x80}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x3]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) clock_settime(0x4, &(0x7f0000000280)) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x20000, 0x12345}, 0x0) clock_gettime(0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x6, 0x0) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x4241) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) unshare(0x42000200) 17:16:38 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x2) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000004c0)="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"}, {&(0x7f00000014c0)="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"}, {&(0x7f0000000180)="aad60676da1b0042ddbda2a07aca2f55f36381009d1534b16535f4251971f6643f53fadb37b06d65b7491c4964bab230e984dbb50a3f313e1a4d72320f0865aad07ab32193de859f36a9c2af839081dca61f174a7cb02e109103f9acecf6a0c11cb25886a25c9861bcaf8e86919b2a594b255d9a8345992ecb9235c4c4c53e971a05ceaf3911"}], 0x5, 0xe) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x80802, 0x77) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) 17:16:38 executing program 6: syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000001, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000013c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2004, @fd_index=0x3, 0x80, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/37, 0x25}, {&(0x7f0000001040)=""/223, 0xdf}, {&(0x7f0000001140)=""/247, 0xf7}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000001300)}], 0x6, 0x0, 0x0, {0x0, r4}}, 0x4) syz_read_part_table(0x0, 0x1, &(0x7f00000035c0)=[{&(0x7f00000024c0)="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", 0xffc, 0x5}]) [ 297.930875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4910 comm=syz-executor.1 [ 297.944104] audit: type=1326 audit(1629738999.030:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4901 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466609 code=0x0 17:16:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000200)) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x801, 0x8c) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x4) 17:16:39 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="fd", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r1, 0x5c33, 0x0, 0x0, 0x0, 0x0) 17:16:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x301400, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) dup3(r0, r1, 0x0) 17:16:39 executing program 6: syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000001, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000013c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2004, @fd_index=0x3, 0x80, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/37, 0x25}, {&(0x7f0000001040)=""/223, 0xdf}, {&(0x7f0000001140)=""/247, 0xf7}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000001300)}], 0x6, 0x0, 0x0, {0x0, r4}}, 0x4) syz_read_part_table(0x0, 0x1, &(0x7f00000035c0)=[{&(0x7f00000024c0)="490dd6b7e711a47800c2590d5470e6a5052474884996fd42ae413f15794ebc20cabb9d93fe3f383a04a8f4acdac7c9d4c175df95b78747a7eed83866e4a521c16fe8c9b7dd14e17153b799e3ced4f72a4d3a936e49713cc252ace70eacd52fa1564d5b7b1ffdff4cf75746ff89b40d52e3b6ef2485bc8e7a95dd14c8f0edf1d0981086cef8a143db7fa72b4472eff15d0470ead835dada250f83287edd6ff384cf860d26e1f775cdcb6f9dd4d05aed6c7979f31b88404a5c6b1335fa1178ff0ee76fd3481423eaa355abb43a5c72821bdb97a78c2f907a7d8d3c56b31ce8785c254ddbff929c3427262e6256d17cdec23e88f534b59a65e4b349f6b99f338490fd965c8d7348b8b67efd232ae16ac06b4958aadb2a97bd9633b422a6f032004200677465b02d10a31a12b055851e6aaeffc39b8f1b214f24e4aa25d124d28851080fe408de1f66e927ed274e36c9c99a7232fef8c82ac7211ef986ce3dd43c2173dcdbc68637a09c7aa9f1f1ece91edde15647fa91171f4a35a4e107d1a44dc8e40be46d636651696baf5db57e6a590383483a8763c2bbc0af2b3c09ab055ff254fffdacbf78b462b6ca745fb9b69d25a5407a5e52e9ab637289eee8c904309ca0b118a91439205c2e8420fea1208a0369a859f0b62de80223520f350c40bff085cad2f6130a0ff914ffff8be0185a5423e85299cc70318dd66ab1d2da3fb7b5e9b26804f2e1104fe87f4435806360d2fdf39531432e22ccc81ddcc4c16fc378c78241d525f2c7afec131182c21488b8d61aead78d971548c94e59ee549573c0133508b8b7bf223e547d420f9c1bfd66148df392f4d78c49eea5ab819c2b9213a849eae6096ca2c8e37807db3e247a4246e865255d837a4eddb9bf6b40a90ae8987fea4639ca5224f22a51bbce9a790e3dc4a19cf5aa0e4041a416415ba02cc8eb4cff179c45340e78490e0bdda32fac2de76d461dfc3a070e9ed82135e857f37301bb995c5235a3bab988779dd657135290d69e66a3b4b53a434d11eb93f02313f0775191f90968a94f968124fe9dc4606fa308d0ee301f7c3d7eddfbd49c29db300f3490413dfdfd743f812cc7ab312fdccef0443d3e7b631e7955ad7f714842d03ca9542ed278787c573936448a9e106e0e7066a06f54ec42c62e6a3a71ae05b11a7d74c1be3c772ca52a6b3257b2490969bd531ca3d6884a37e24221abfafc701a66dbac8e0b4612d08deb5c96dc6b5224147dc603d57c061ef80d3f667ba9bb4d15526d2694618e0f4489aa5809ac340f056789ee37cf18fb758d57ec811e22cc80bb5c94362d69f24c0b253a9efbea44c74163665308ff174cdf19c5a38908aef37dbe99b4b0008fc50a53c53949bafb4db17b9d6a479bc0591cea9e3b1e37fe3905b70d206598f8cb7c4596736c4e78db144dbab893e658428684f0f2c35d1b63808550e6e9f19c379398fa426a558f611d3ca5b086eb5c08865c634ce24886e32a659a6d00831d1b763883dbf19bc1f2d73d30f6ca87b26379f6340f69e264227b76998454ebcea746c48f9497584ae7eda54f95a728fe806a22e74065b10e5c9f636c8c55cd7fb745a3f3a8ee92a25e95fe79562823d791fcafd55e5ead284a064576f0e98e89e00d96f73c959492daac68b5f0e3ba7c63dafd6a6c3eb4edc6c489c842b5112798908abe000e11b5c15748a583dbd9ea8f789d38e2e7e6d04e34e42b4acb10da5670595c0c8bee2d0b77f70c766e6f6bd06f143c5eb83300351703a0909598578ff495f8dcffc0d3f4e413f84ec47bd9536ca90d82c06c651420485c3302a2f136e6b6311dd931a4395fbb8c5f84c212d220eb8c6d4325efebb452df5f690e63fadedd6fb6dcb9e6ec86df1ad5b04d9508ae675c97cb69ed53ece0a5da466109d76117ba957f0deb3511ab9515c1d3c8ca7be3ee6bc4a68dda282ba34c09e6aa2a481553161d33a25299dddecfabce232d36b7eb36792a3bf78c6876f1d37f5c0dd6874ee5cc6d1d8fea769a6232afbcf41b7e45fdedb011069b6ba52c1c89e5e89531b0b475a87240e3685f508cecf46ab93c85bb712878906ee653ec95ac66d6ec0f79a4350cfb4e1538b9a851e908e895d7d405c7d80480789e8b6e057db4f47ac81ee993c73868bf063b70a8910ee4e6e11616fecc408f50784a26b8b7c8e478a647096c0434a677879b64321aefd150ab5aba26872521f7f8703d5f14881d25e624d6283f73a16751bd26fb2a687fe47d188eeddaf3eba493007f6da819114d45dbc8e5444401a0a79938c19fa3905b52097df39a706cbb61927f065e0b5c63752558c05408aa16cedb293866ef3086ac62365fa316cdb8334ade53c8ea9965ba93dcd13b1d1334bd5e417985e3d6030b97b7c83190990583faef4e015702b9ab12dc563897ffaceb014c551a094f0a7d721566840411a34ff4b41d0ca4390dade4734d14870d8ee73d7b106d3e6385c16dd8515e5602938b28a336daca157f8d146a9a5ab3b1e92e8e6f2882e18ef2e5345d9d808dfdf18749f082d0299e6fa5e12428b38d98d7f6fb2500a2464082b1892fef3c53698aa3d167740c70602aacb8e6a954929d18046fdeaccae4f8316244dd0929758ba408e152bf52b95d14dd59184ec1cfd7ff9de2c5fb47fc85ba5bc79b344a58654afcda9bdbb2d589468c6fe3af97d4d02747c1174119302b47efe3697eb03fbcfdf62d45389b60cd0df5623fef45909cadd209fb2ce8d19901c2515f45bf8e0af3d998a5a3825d44eebda016c4b367a1449b99bbc216ccd2e5a816d783e313c02a50380b33ff4551655d94904809d69eef821ea0834139dbf1f8e35e9e890b147605d910fb6d7b14ead3a63a466fed40782eee5b53f2cfe693c48b021bab614f1d8e5babf80d6a77c0a299aa0510c0706551d7d6dc763ae2dbf460534da144fc7e2be291d26779324ffc55bf3beb8b68a1444b23507df40637ffb27fbeadd50b3ba472745c60bf5fc0504bd7a542913491df788ae3cd37a03e2af458e58e501f5049c39a7cc32c752b026533a068f1d0ede5610cb5ca832535a146966ad4b8ccc99884202bca3656116cc50ca9f151a60eba1d296fa11b454b26834f1ae331342fae5276a345fa1fdedc8a36a38ac12fb18c1259444612b896f83b93b134202203d61ba019cd732f480b00d72b8b8d2a8e057970712230cbfdc793f3345ed68ed23a6172686dda9e9584d5b599bb9c40d1d4475396de437e1f828b6e6bd708f3c4721d3c5daaf58891a6a1e13ab3aa0e3a1edbb0c6015d74f533b7ff2e0a2164c05905f5e280af478fc068ad67d4aed2e4bba6f2fe10cafff4bdd5a61d92ed1ff4c9e781fe1b9273934b6a4cda725ebf39ca149bf73eefb244f5ade958334083bbdad0fa5a0c6ca645204f1c0b722628154c6fc33dc304ae26b5315570f4d27c74bf4cd618262aaed2ed87f0ebfd71d1d0387631eb10c268b8564acf361e7cf6aef00ddd7c29ff2f22a43ed111e9ba31d212734dbda0cab57aa678bf81fcef0b2c8b27ed0c1ad0594406dbea2a8505476ac4ed5cb94af9bb1e2c747f886b488b20bc4bb20cd2f03dc060068339c4fb8461db358d5a3a06db60e6e41b7428c68f196a7aead6f323313cc0985022d2794d8f5d2ddf53297ddb31a87e25c44d73d45e72290fb00b53c2d289c3000805a810e6dff989361b5ba140721e073672e925d8bdcca15f7924b5d29af71b160bd3654de2253a74cd0126381e4d86f83bc17b4e94750ca961b5af54dea0b3f919a4a5d493b1ac7095ef489ba5749dbe4f6fa553f8de412ab6f653ab7c746d40fc5c73c1c0e29d530d2c62ae846d469dc008ad7643add392ab7082b8042eef12c8530ed6277af0abb3ca3d5a16fc236061080b7a95adf010e915f5b7dfda182873ccdcf18d98ddb8903f06fb8b9d45bfe351cee0eee41927efa00b28e4381d71d91257453de6bb5327173b6344b020666af92b32b451d9d25559e5b8eb1d87a53557771c2cc4be31e8abb92a78534a8442f47c23aafd47adc658c5e6317faab0527702dad7e39b31e0d6518a667df75edf947a4a485162f711baf1261627b8c3d2b3bbfa1f11637fa3f844375e0963f21efe97d76a1f82e56a5693cddaff8839a349fb9a29453b0e06d6aae20cdecebe1a7d64ffda88932d20dd7e080452db726d225360faebdd52f5b5ea11802391002d1b513da942e0b8e681bfae18d047b8fc7f42778adfa411815db47866ed8623524b0fe9a621d5fd175a0f5ea933089686891e58ea59eab314983cabe9354b0cfaef419b3e63b103e33f12f3827b884330b522065620d02ae957596172b46e3ceed0c047521a62e5525639e0a216c109219bcb3da5010f799c0ad38c30ab9f83954183034319d0d80142f0c005637ed08a8a5e411107b791a68277f15bb10715f9dd98bf268aef6d211d97b291e9b6bc5964f6567fd5ac9cfdec1bd80a319ce18962cc25740ae756a3d53504d0ae2c356b6b8ef5054a72ab6245873b4bffc4d5ad78a76ec438f54662c9a834a50ce6d4662b6444f963bfaf89c11ef0270b894e5b92fb112d9b4b5777aa8885089b399cd392683462e4b6adba0db9defc9fc9827978cdd6ed968806c730b293181ae6a0c7f720a29a53926bec5ff5b5d246f158052bdd17362c84a1aa6843b81f577547696eb0017edbb7be2f45ed9661c919494bdd2b66b42ab27b9a6c105d8f62c63690fca7e8c143c515af90b050ddc57622122d1661ea9612f98f92c2b36649d312507232119b21d26118073d7c5d4b226222586a4d252a2ea632b1aa5b297922e1275023d5a5e1de16845d81dc62b15021b58496aaa858a801f5e3a507f691d6d139007ef9ea323bd0025cffae581a336f2ae88f39f34df73904272cb9baf6b0174daf527f525f6ad51db3530eb29d6bc669e176ac955b5ad0697ae83418dfce5c01168c1a22901bef50bbe2e78e6b8e579b6a6ad253e5c921044dda93de84d86ccc7512f71b29a58edc7113bf71e7d8011e2cf6fa2b2d81b2486b68fa08aeb85e7b588cd702147e7957947ac3dbb057a362baab5a435e949d3feff30667a88115c88e55b545593b34d94ee4774a168519829fe64e099741dd6fbfef5a83e65cfdac308501bad5492791cb3dabe8b256ce02910e70754d24b5a02afbc0f7e68e5317445fc16ef65418fe8b131d0f98b510b1e89876f007c6306dbe3d23f223bb72bd81c13cacb7d2440cc96fd5b295156c13bc04c212ba0b3c12f31d0411d7eabdf98929a040aadf9ebb7b19886ac20ba9f5e56f790941cc8bf3b566e4f86859c42a5f37f58242f858bd8552f265b4c157bece3c002409e7bec485c0b395bba1fac32a5f701cc6912b668b882692a35a85e473e4d630116f075785a6b9cb58bb3f2c8370ef5eeadc0a74665c8f0591fc13f07669b9734e6bf624e019825f144d2a36cbef0e3efa0c4eabf9cdf0a5302bfb8e9664424ccd5f03648be1fc9131b74c10a24280a19b022e3d6574c2a1753e62298a48bc2d3e76f390d5845c035ef9bf3cb3928c4c2c0b54fa8ec15c89112fda3042ab13eb2072ee840fe9a27fd6cf450d58d159b9b61c76c11e0e1ae96946ce9fd3e2acd2beb061d7ce7dd61e86a865df45cea0e3e51c2444506f7b5033390c1564d74fcb6f51115066d643018da333fa18bb145ae85850e97491c896498a0f49c10adf4e2a43ee3c628c48843c86fa583dc726335fd9ea1bc43419cec82acce3526353bd140095539345431c43baa73537f336369ae68dbbab93", 0xffc, 0x5}]) 17:16:39 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f0000000140)=[{r0, 0xa14}, {r0, 0xc084}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x609e}, {0xffffffffffffffff, 0x80}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x3]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) clock_settime(0x4, &(0x7f0000000280)) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x20000, 0x12345}, 0x0) clock_gettime(0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x6, 0x0) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x4241) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) unshare(0x42000200) [ 298.212992] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:16:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r12 = dup3(r11, r1, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 298.237087] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 298.238687] FAT-fs (loop1): Filesystem has been set read-only [ 298.255447] FAT-fs (loop1): Directory bread(block 72) failed [ 298.256700] FAT-fs (loop1): Directory bread(block 73) failed [ 298.258683] FAT-fs (loop1): Directory bread(block 74) failed [ 298.259798] FAT-fs (loop1): Directory bread(block 75) failed [ 298.261861] FAT-fs (loop1): Directory bread(block 76) failed [ 298.263069] FAT-fs (loop1): Directory bread(block 77) failed [ 298.264973] FAT-fs (loop1): Directory bread(block 78) failed [ 298.266068] FAT-fs (loop1): Directory bread(block 79) failed [ 298.267956] FAT-fs (loop1): Directory bread(block 80) failed 17:16:39 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) dup3(r1, r0, 0x0) 17:16:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000200)) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x801, 0x8c) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x4) [ 298.484522] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 298.494016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 298.495174] FAT-fs (loop1): Filesystem has been set read-only [ 298.506578] device veth0_vlan entered promiscuous mode [ 298.553187] FAT-fs (loop1): Directory bread(block 72) failed [ 298.554247] FAT-fs (loop1): Directory bread(block 73) failed [ 298.561805] FAT-fs (loop1): Directory bread(block 74) failed [ 298.565860] FAT-fs (loop1): Directory bread(block 75) failed [ 298.569805] FAT-fs (loop1): Directory bread(block 76) failed [ 298.574570] FAT-fs (loop1): Directory bread(block 77) failed [ 298.577407] FAT-fs (loop1): Directory bread(block 78) failed [ 298.580936] FAT-fs (loop1): Directory bread(block 79) failed [ 298.584290] FAT-fs (loop1): Directory bread(block 80) failed [ 298.761050] audit: type=1326 audit(1629738999.847:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4901 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466609 code=0x0 [ 310.249989] kmemleak: 19 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:16:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029d9e437f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000c1e770325132510000e770325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000c1e770325132510000e770325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000c1e770325132510000e770325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000c1e770325132510000e7703251070064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000c1e770325132510000e77032510300000000002e2e2020202020202020201000c1e770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000c1e770325132510000e770325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="159e070032c2fed1d33ffe26d1cf81da8d496221c20ac04fa67d3d34dbe8371ef079f9672a45a5148dfacf43fef5fe32bd06ae2f9e953ce26ce93fa1da8db5452623228635b29d74e0038d61dd1aa0e38a4c21e3"]) 17:16:58 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) dup3(r1, r0, 0x0) 17:16:58 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) copy_file_range(r1, &(0x7f0000000040), r2, &(0x7f00000000c0)=0xfffffffffffffff8, 0x80000000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x452dc0, 0x0) fallocate(r3, 0x1, 0x9, 0x6) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 17:16:58 executing program 5: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x21, @none}, 0xe) fcntl$setstatus(r0, 0x4, 0x2800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) fcntl$getflags(r2, 0x408) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) 17:16:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x100188c, &(0x7f0000000140)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x200}], 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @a}, 0x7, 0x0, '\x00', @auto=[0x31, 0x37, 0x2a, 0x2f, 0x40, 0x2e, 0x3e]}) sendfile(r2, r0, 0x0, 0x7ffffff9) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) 17:16:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x100188c, &(0x7f0000000140)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x200}], 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @a}, 0x7, 0x0, '\x00', @auto=[0x31, 0x37, 0x2a, 0x2f, 0x40, 0x2e, 0x3e]}) sendfile(r2, r0, 0x0, 0x7ffffff9) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) 17:16:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r12 = dup3(r11, r1, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) copy_file_range(r1, &(0x7f0000000040), r1, &(0x7f0000000140), 0x0, 0x0) close(r1) clone3(&(0x7f0000000080)={0x3040300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "131f30652bcce6ed4bf7b3bb48552cb062b72844177b34f3429ee029850c5bc08cf77429295e81eb97f5c293309cea2670c2fc802680bdf152bd3847c5ac113c", 0x18}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000061616161616161616161616161616161616156616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131"], 0x48, r3) [ 317.536090] FAT-fs (loop6): Unrecognized mount option "ž" or missing value 17:16:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x49) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 317.608200] FAT-fs (loop6): Unrecognized mount option "ž" or missing value 17:16:58 executing program 5: lseek(0xffffffffffffffff, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="01009606f5dc110040", 0x9, 0x560}, {&(0x7f0000010300)="021c00de02000044b6", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000edffffd4f4655f008000000000000800050000000af301000400ffffff", 0x22, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000040)=ANY=[]) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x2) 17:16:58 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) r1 = fork() tkill(r1, 0x0) r2 = fork() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') r4 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r1) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000140)={r3, r0}) [ 317.709251] device veth0_vlan entered promiscuous mode 17:16:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, 0xffffffffffffffff, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(0xffffffffffffffff, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:16:58 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8e813957ee8617a88000000000000d0", 0x25, 0x2000000}, {0x0, 0x0, 0xffffffffffffc587}], 0x0, &(0x7f0000000080)=ANY=[]) statfs(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x5e) acct(&(0x7f0000000140)='./file1/file0\x00') unshare(0x20000000) unshare(0x8000100) 17:16:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x1a9001, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x300, 0x1a0, 0x3}, 0x18) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000100)) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xfffffffeffffffff, 0x8, &(0x7f00000006c0)=[{&(0x7f00000001c0)="068ffb84f8f5d597aa0ee2dc34519be541ebee31f269f8cbd89d82ca1624686c06253ae10d0ee6b30936cdcacb9ea2bdb92663123ee8628975e76feea5286b36f1ef36cdadbc26b91b95efde5855", 0x4e, 0x5}, {&(0x7f0000000240), 0x0, 0x1f}, {&(0x7f00000002c0)="8951ad2d07c4929a51f875a2a277fc7287cc0c8b1c1ee2c381ca270ef620f50b7609c6b9e29783785b46ec7bdf5d66baca4e85b8469c8ea5216ea019f4053e0e2292f62ecd60eaf7554dad5a5fe1be2d8bc14d117062c81b08dc79f32eee7f15bd9b8868548aa5b2d8fa4c1666ea8ecd53c053af41bd66472fb1064ddb9fdd7522784badf26b23f6aec62e1f72c0b273405b270ea7975c3de5b127b52529553a8321ae72aa5f0ff10502d343f7e7d930824567b3fe47caf49922410e775cd4bbc7c0d42acf2357b110d88ce894de16c48b0b0bb4714b30547ad811ef0714d8763609434c58d5e10caf167f5c7f2f8ebb", 0xf0, 0x7}, {&(0x7f00000003c0), 0x0, 0x6}, {&(0x7f0000000400)="0529248dc5433238fe45be1cb6683562ece8acea463b7669e654a412471c20e0acd85bbfeafc0515850d0821fe097349c6099871d909b7d796b5363db2d5ba8038c897e4ee684392be71cb2534fd3106239977e3f912247002040c502f88c307a78afe1dd0391c24cfafa9be21a0165075b4c75b10686ce2082e9a99e885731a0cb81107e635cd075e8a69abcdefac4070e3235217e1e9285540be8761b22d8566fc52d8c3caf9952b553576715f43a13c5af315ad475b8a1dd692e821dc6845a62a5a639f3c0a909e73404c981b32f55b570f639a1f77684400ec226e75f63658556037143f8e5530ea20614d84", 0xee, 0x6}, {&(0x7f0000000500)="f0d515ce760c40f821dafd586c095f0e91d8862fcc7729336ccb093fa00f6678b37524a2f71196ba38324c875554b210811c8478cc08ad4815e6ec7e4f9514e64e0f43fee7967e086df818723140896010d76594bc6e51d3a1b312d543b3b074eb3cbe2165cf639fe65812f7acea251000d6b70b54fc81f3d200c07a2f560ba8ec58ffe8517ad0cc18c10c5bebbd8e14f200ef5b64758614c7e3da", 0x9b, 0xffffffffffffff81}, {&(0x7f00000005c0)="f909c5c2f5eb4f93751980e442d420aa8e6ce2c194ecb3f2bda0ea332cc1b03431af6a9f4ec2b7faf57b7e02d2003df5d1dffe87c6f613faeaae13e1fa70d8ce24469a74bb0f6a7ecf5a118c8b9a5ff2c71a41e135a9aa98b08845bbd7eb92159c471673ad5a3f93d405db4650e506d479e084ef08b42edab270120cd8a27a", 0x7f, 0x914}, {&(0x7f0000000640)="e49147d7ccd6b2cf9d7f4f1748111261606781cd4dd8f2a5199c4f29bf63b558d9603e24f150adfe15db879d86d3caafd6ddee4acf4513e1f841a890b93cfad079f3a7233a03df8285cbd54845faa3973160866abd0baf66449e13b2ad98d5ee41", 0x61, 0x4049}], 0x0, &(0x7f0000000780)={[{'#\xca'}, {'[,\xbb,\'[@{.-\\]()&\\^]*\xea+'}, {'\xa1'}, {'/dev/snapshot\x00'}, {}, {':6'}, {'/dev/snapshot\x00'}, {'/dev/snapshot\x00'}, {'.[@)!'}, {'%['}], [{@measure}, {@uid_lt}, {@dont_appraise}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '/dev/snapshot\x00'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000840)={r5, 0x3ff}) ioctl$SNAPSHOT_FREE(r0, 0x3305) [ 317.822469] EXT4-fs (loop5): Unrecognized mount option "./file0" or missing value [ 317.845823] audit: type=1400 audit(1629739018.931:12): avc: denied { relabelto } for pid=5338 comm="syz-executor.5" name="file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.871615] audit: type=1400 audit(1629739018.955:13): avc: denied { relabelfrom } for pid=5338 comm="syz-executor.5" name="file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.895567] audit: type=1400 audit(1629739018.981:14): avc: denied { getattr } for pid=286 comm="syz-executor.5" path="/syzkaller-testdir740802083/syzkaller.VHsPeg/25/file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.906236] audit: type=1400 audit(1629739018.981:15): avc: denied { read } for pid=286 comm="syz-executor.5" name="file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.926169] audit: type=1400 audit(1629739018.982:16): avc: denied { open } for pid=286 comm="syz-executor.5" path="/syzkaller-testdir740802083/syzkaller.VHsPeg/25/file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.948325] nfs: Unknown parameter '#Ê' 17:16:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) r9 = signalfd4(r0, &(0x7f00000002c0)={[0x4]}, 0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x81, 0x2, 0xb7, 0x7f, 0x0, 0x205, 0xc00, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x1ff, 0x1}, 0x400, 0x5, 0x20, 0x4, 0x2, 0x200, 0x1f, 0x0, 0x9, 0x0, 0x4}, r8, 0x10, r9, 0x8) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4}, 0xf6a) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r10, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80) syz_io_uring_submit(r6, r7, &(0x7f0000001900)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, 0x0) dup2(r5, r10) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) [ 317.962896] audit: type=1400 audit(1629739018.982:17): avc: denied { rmdir } for pid=286 comm="syz-executor.5" name="file0" dev="sda" ino=16055 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=dir permissive=1 [ 317.980470] FAT-fs (loop1): bogus number of reserved sectors [ 317.982063] FAT-fs (loop1): Can't find a valid FAT filesystem [ 317.993084] Restarting kernel threads ... done. 17:16:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 17:16:59 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000140)) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=0x32e, 0x8, 0x2) bind$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 318.031997] nfs: Unknown parameter '#Ê' [ 318.039801] Restarting kernel threads ... done. [ 318.167674] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 318.199139] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 330.254879] kmemleak: 37 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:17:17 executing program 1: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000080000100000000101477a002a00640000012f9078ac1e0001ffffffff4408e76000000006"]}) r1 = accept(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) accept(r1, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000200)=0x80) syz_io_uring_setup(0xfb2, &(0x7f00000003c0)={0x0, 0xe84e, 0x0, 0x0, 0x28d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 17:17:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, 0xffffffffffffffff, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(0xffffffffffffffff, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:17 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$notify(r1, 0x402, 0x80000007) r2 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r2, 0x402, 0x80000015) fcntl$notify(r0, 0x402, 0x14) 17:17:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) 17:17:17 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x1a9001, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x300, 0x1a0, 0x3}, 0x18) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000100)) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xfffffffeffffffff, 0x8, &(0x7f00000006c0)=[{&(0x7f00000001c0)="068ffb84f8f5d597aa0ee2dc34519be541ebee31f269f8cbd89d82ca1624686c06253ae10d0ee6b30936cdcacb9ea2bdb92663123ee8628975e76feea5286b36f1ef36cdadbc26b91b95efde5855", 0x4e, 0x5}, {&(0x7f0000000240), 0x0, 0x1f}, {&(0x7f00000002c0)="8951ad2d07c4929a51f875a2a277fc7287cc0c8b1c1ee2c381ca270ef620f50b7609c6b9e29783785b46ec7bdf5d66baca4e85b8469c8ea5216ea019f4053e0e2292f62ecd60eaf7554dad5a5fe1be2d8bc14d117062c81b08dc79f32eee7f15bd9b8868548aa5b2d8fa4c1666ea8ecd53c053af41bd66472fb1064ddb9fdd7522784badf26b23f6aec62e1f72c0b273405b270ea7975c3de5b127b52529553a8321ae72aa5f0ff10502d343f7e7d930824567b3fe47caf49922410e775cd4bbc7c0d42acf2357b110d88ce894de16c48b0b0bb4714b30547ad811ef0714d8763609434c58d5e10caf167f5c7f2f8ebb", 0xf0, 0x7}, {&(0x7f00000003c0), 0x0, 0x6}, {&(0x7f0000000400)="0529248dc5433238fe45be1cb6683562ece8acea463b7669e654a412471c20e0acd85bbfeafc0515850d0821fe097349c6099871d909b7d796b5363db2d5ba8038c897e4ee684392be71cb2534fd3106239977e3f912247002040c502f88c307a78afe1dd0391c24cfafa9be21a0165075b4c75b10686ce2082e9a99e885731a0cb81107e635cd075e8a69abcdefac4070e3235217e1e9285540be8761b22d8566fc52d8c3caf9952b553576715f43a13c5af315ad475b8a1dd692e821dc6845a62a5a639f3c0a909e73404c981b32f55b570f639a1f77684400ec226e75f63658556037143f8e5530ea20614d84", 0xee, 0x6}, {&(0x7f0000000500)="f0d515ce760c40f821dafd586c095f0e91d8862fcc7729336ccb093fa00f6678b37524a2f71196ba38324c875554b210811c8478cc08ad4815e6ec7e4f9514e64e0f43fee7967e086df818723140896010d76594bc6e51d3a1b312d543b3b074eb3cbe2165cf639fe65812f7acea251000d6b70b54fc81f3d200c07a2f560ba8ec58ffe8517ad0cc18c10c5bebbd8e14f200ef5b64758614c7e3da", 0x9b, 0xffffffffffffff81}, {&(0x7f00000005c0)="f909c5c2f5eb4f93751980e442d420aa8e6ce2c194ecb3f2bda0ea332cc1b03431af6a9f4ec2b7faf57b7e02d2003df5d1dffe87c6f613faeaae13e1fa70d8ce24469a74bb0f6a7ecf5a118c8b9a5ff2c71a41e135a9aa98b08845bbd7eb92159c471673ad5a3f93d405db4650e506d479e084ef08b42edab270120cd8a27a", 0x7f, 0x914}, {&(0x7f0000000640)="e49147d7ccd6b2cf9d7f4f1748111261606781cd4dd8f2a5199c4f29bf63b558d9603e24f150adfe15db879d86d3caafd6ddee4acf4513e1f841a890b93cfad079f3a7233a03df8285cbd54845faa3973160866abd0baf66449e13b2ad98d5ee41", 0x61, 0x4049}], 0x0, &(0x7f0000000780)={[{'#\xca'}, {'[,\xbb,\'[@{.-\\]()&\\^]*\xea+'}, {'\xa1'}, {'/dev/snapshot\x00'}, {}, {':6'}, {'/dev/snapshot\x00'}, {'/dev/snapshot\x00'}, {'.[@)!'}, {'%['}], [{@measure}, {@uid_lt}, {@dont_appraise}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '/dev/snapshot\x00'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000840)={r5, 0x3ff}) ioctl$SNAPSHOT_FREE(r0, 0x3305) 17:17:17 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x600002, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x9, 0x3, &(0x7f0000002140)=[{&(0x7f00000010c0)="b447e8717307e674b75ad8", 0xb, 0x12f8ebc5}, {&(0x7f0000001100)="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", 0x1000, 0x40}, {&(0x7f0000002100)="3f0ca1f75e0c885e9fcb21e11523f72ad38af4a3044a87444e5a91eddf2569c0e13003659e62261e375e824b18a272116a0c28b248b7ff0c2a", 0x39, 0xddd}], 0x8000, &(0x7f00000021c0)={[{@dots}, {@fat=@errors_remount}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) name_to_handle_at(r1, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)=@reiserfs_3={0xc, 0x3, {0xfffffffc, 0x2, 0xfffffff7}}, &(0x7f00000022c0), 0x400) 17:17:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYRESHEX], 0xa78) close(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa49c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5a}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x48840) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 17:17:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="c83fb16e3cdb709b525e68cbfdec099f22", 0x11}, {&(0x7f00000001c0)="225df1baa4573e01ed724d9895db3b3ecb3e7b2714b4bb0e2b4145e1844c2d7b815c52bfec2e038d60de2dce19a0264a9e3f28d61136086dae0ff004ca4365cf763850dc434f8e3155012c8a8d3718870ba3b51761e35cdbe3f7f79860f6d4d7f4852244a3dee7e085f02c9437cb8da74a720399e5a6f439506321a0a2599cc6c6e7f17ed53df081a4a36e02b29724a02ff1bc249ea96d4e5f6eeeb7d54aaf172f643a59f7ec37646771da0a7fdf9e7adb89b20413d6589feac959f5524fbb1155e4f5c47a33cd18bdedc51a415a2947", 0xd0}, {&(0x7f00000002c0)="4e631f00ae7c2ccc391f9ee2d6e1875104f98039a362822b483e2f44ff95b6448249d08becaccfb5c7799cabe9cdcea20a02aec4c1bb906840535384658481685df5b7ac00bc1511a7ba2e822d032932947438453cec1f897a113a0eb4809ed9771897fe97031d650c4c5ed81e0559a5783b43743c6ed4690573fda41761", 0x7e}], 0x3, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x40) r3 = fsmount(r2, 0x0, 0xc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x57) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/225) [ 336.283525] audit: type=1400 audit(1629739037.369:18): avc: denied { watch watch_reads } for pid=5500 comm="syz-executor.7" path="/proc/5500/task/5506" dev="proc" ino=16968 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 336.333528] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 336.343153] nfs: Unknown parameter '#Ê' [ 336.357836] Restarting kernel threads ... done. [ 336.397841] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 17:17:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, 0xffffffffffffffff, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(0xffffffffffffffff, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5642baf8", @ANYRES16=r1, @ANYBLOB="010025bd700000000000070000c80a0004007770616e3300000008000100000000000c050000800000000000d8061ecb0000000000000000"], 0x60}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000004c0)={[{@inode_readahead_blks}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="080028bd7000fbdbdf251c0000000c000675624881b87b0aad93"], 0x20}}, 0x8004014) r3 = syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x3e, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40890}, 0x4000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250a000000400004800900010073797a30000000001300010062726f6164636173742d6c696a6b00001c00078008000400b5f9f2fcf571c87114090000000800040000800000080001001d7f00004c0002802c000380080001000100000008000200040000000800020004000000080001002000000008000200ffffffff0c0003800800020001000000080002000101000008000200af4c2d3ea000028008000200fbffffff0800edff090000000a000200889700e00700010015d5000008000200ff160000ec000200010100000800020007000000080002000101000008000100090000005402038008000200000800000800010006000000080001000000001808000100010000800800898b990800c25954bc803b8528248008000100fffbffff0800010001800000080001000100000008000100070000000800010005000000100004800900010073797a3c898128f987eade053000000000300004802c00078008000200020000000800030001800000080001000d0000000800030035250000080001001f0000001400038008000100030000000800010001158c81eda19799a0e7ff374ad5fa960000dcc5b9f00364fc1ad20fab594b1d0b00180007800c000300b8000000000000994391dc2b"], 0x1ac}, 0x1, 0x0, 0x0, 0x2}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004080101000000faf70000000000000405000300010000000900010073797e3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 17:17:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000000080)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000000040)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fe33fb0a1ffffff0fffffff0fffffff0f0700000008000000090000000a00"/49, 0x31, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16800}], 0x0, &(0x7f0000011200)) 17:17:17 executing program 3: eventfd2(0x0, 0x1) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x6f, &(0x7f0000000040)="636bf6659c2433feaa3873ef9b9be7c1e6ea646de99f24d8c36bb211a5d69eed208075633478bb6b5186d4adde702ea9dcec1eecac5fadf29670a23e2d8c8a44b08f06814ecc52cd276b55d4e5c034c024a40ad5dc3163707eedb331fb8b8b1b8b92292471ac79646846aaf3321c31"}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x200, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2000000000, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000280)="33b3425632ef16a82ed096a9c6784e248f85d196935ce5438ae76332c8dabfe9c2cec1256def53627714c6e34b9431cc1270c060a180dbfeac3aa7eec8cdba10b367940db5b9ddb46a2db9ad790d1095129d5c171d6ee756ce2c158bea93061251718be9a0c0af40fadd0f082d800a3758c04360b5b165153d81d40b765abb8b569ac9a06f2922241778996e531c4963b751281bd66f87297b5a53ba993b3aebedfb4ba3507a85773c123bbee5") r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r1) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='user.incfs.id\x00', &(0x7f0000000400)=""/209, 0xd1) r4 = syz_io_uring_complete(0x0) accept4(r1, 0x0, &(0x7f00000005c0), 0x800) accept4(r4, &(0x7f0000000500)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000580)=0x80, 0x800) mknodat$null(r4, &(0x7f0000000600)='./file0\x00', 0xcdcbbbaae31db2e6, 0x103) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="e1a0ed1c841a0000008000000000000034dd055d856007284f6da7b15babb660970f4abbebd870348cb897992bdfe190cf802cb6baddca23c41c15aa098166b8fac25e280a071a41f10821762bcff41f9c1c4f755c572a23d26e0a09ebd18b63c8c4a670186721528d23645a61a6fadca05c4f1a7bc1194b7ef933cf35392f27bc422ffa4b6b4ad07c5cf7237ab383589bb68c23e93684a6fbb992bf439d869931d90d5997e5c13a53a02f344bfdcd14fa75f5f7d7a40e712978748c9430cdc77553f9cb2400000000e79ae39c7ff8a69b", @ANYRES16=r3, @ANYBLOB="000428bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x800) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'veth1\x00'}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0xb2e8000) r6 = syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x5, 0x1, &(0x7f00000008c0)=[{&(0x7f0000000880)="9fc761afef98eeaae5881e0d04680ba662432cfbbc281828e1ced7e7ec44fcc08a822f0fad7fa99d8c37323f", 0x2c, 0x65}], 0x4048, &(0x7f0000000a80)=ANY=[@ANYBLOB="646f7473281b3f74732c666f776e65723cb0327e71fac05dcd4b65a0c2e256030897907de809b2420abd9f5dab42baefeef2b5d5862b075483f6676e5fe63200856aa556d85abb900685c00aabdafccf9190626c915b1281ee266de8b50e919ba94b0c1943d945e5ca343036877e67f34d44f68896cca26bfb823d744c3cd20694214b30f2b7e96f06de", @ANYRESDEC=r2, @ANYBLOB='$\x00']) statx(r6, &(0x7f0000000940)='./file0\x00', 0x100, 0x200, &(0x7f0000000980)) 17:17:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xc8102, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0xa870, {0x28, 0x1000000000000, 0x716f, 0xfffffffffffffff9}}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 17:17:17 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) io_uring_enter(r2, 0x58ae, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000180)) ioctl$TCSETSW2(r1, 0x5437, 0x0) [ 336.584109] EXT4-fs (sda): re-mounted. Opts: inode_readahead_blks=0x0000000000000000,,errors=continue 17:17:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xd4}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30343636343439353900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c8b70d3c99374a58baa2fffdfaacb391010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400000000000100"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d8f4655fd8f4655fd8f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002000400000000000800030000000af301000400000000000000000000000100000020000000000000000000000000000000000000000000000000000000000000000000000000000000c6d15a57000000000000000000000000000000000000000000000000ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000024000000000000000000000000000000000000000000000000000000000000000000000000000000ec07159c000000000000000000000000000000000000000000000000ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3034363634343935392f66696c65302f66696c65300000000000000000000000000000000000000000000011b29fd4000000000000000000000000000000000000000000000000ed8100000a000000d8f4655fd8f4655fd8f4655f00000000000001000800000000000800010000000af3010004000000000000000000000001000000250000000000000000000000000000000000000000000000000000000000000000000000000000003dd6111f210000000000000000000000000000000000000000000000ed81000028230000d8f4655fd8f4655fd8f4655f00000000000002001400000000000800010000000af301000400000000000000000000000500000026000000000000000000000000000000000000000000000000000000000000000000000000000000819cff70000000000000000000000000000000000000000000000000ed81000064000000d8f4655fd8f4655fd8f4655f00000000000001000400000000000800010000000af30100040000000000000000000000010000002b0000000000000000000000000000000000000000000000000000000000000000000000000000003a1066d200"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) [ 336.653716] EXT4-fs (sda): re-mounted. Opts: inode_readahead_blks=0x0000000000000000,,errors=continue [ 336.665882] FAT-fs (loop3): Unrecognized mount option "dots(?ts" or missing value [ 336.818069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 336.820139] ext4 filesystem being mounted at /syzkaller-testdir657806975/syzkaller.sIaP65/23/file0 supports timestamps until 2038 (0x7fffffff) [ 347.661120] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:17:36 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x517f40) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@reiserfs_6={0x18, 0x6, {0x8001, 0x1d, 0x100, 0x6, 0x0, 0x7f}}, &(0x7f0000000180), 0x0) 17:17:36 executing program 7: syz_io_uring_setup(0x2b47, &(0x7f0000000000)={0x0, 0x924, 0x2, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 17:17:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000000) mlockall(0x1) 17:17:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fork() getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r8, 0x4, 0x2800) r9 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r9, &(0x7f0000000800)={r3, r0, 0x80000001}) r10 = dup3(r9, r2, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5642baf8", @ANYRES16=r1, @ANYBLOB="010025bd700000000000070000c80a0004007770616e3300000008000100000000000c050000800000000000d8061ecb0000000000000000"], 0x60}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000004c0)={[{@inode_readahead_blks}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="080028bd7000fbdbdf251c0000000c000675624881b87b0aad93"], 0x20}}, 0x8004014) r3 = syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x3e, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40890}, 0x4000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x2}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004080101000000faf70000000000000405000300010000000900010073797e3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 17:17:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5642baf8", @ANYRES16=r1, @ANYBLOB="010025bd700000000000070000c80a0004007770616e3300000008000100000000000c050000800000000000d8061ecb0000000000000000"], 0x60}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000004c0)={[{@inode_readahead_blks}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="080028bd7000fbdbdf251c0000000c000675624881b87b0aad93"], 0x20}}, 0x8004014) r3 = syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x3e, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40890}, 0x4000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x2}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000004080101000000faf70000000000000405000300010000000900010073797e3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 17:17:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x160, 0x18, 0x800, 0x70bd27, 0x25dfdbfc, {0x8}, [@nested={0x14b, 0x50, 0x0, 0x1, [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="9bb87c41e1949e7b05d12c6c517da34c8377ffe54f937eb26de2067cb4408aae8f533bb1b62b6ec23aaf13dffc784f94", @generic="1989e64654e41365c237cd6054d3354e91b94a8fbe18838494830a59a75b2c3ae7954e4ccd44efeca8ded526b493dce6b17beb095f742905e3e3e5a05dc2ca4887360cacf551ae8509a4581e7eb5e034ad63081316dc01bf253fcf5d061fec97ef807814156cbcf375eb332a1bf24beddcaaa0e93f5bcda2fbe074828be5980ed3eeb025170b133a4c1a147a196d4e40288185d9b372efb7a2dfef9c7f310a9c3f0f13dba702e3c4d11249875f4e06f2d4c6e97c63b2ab3676915c894bd9e2d525f2847cef262a8a7e42e3f80dd1b4b4e3d69e32aa4e8320b1d7ffab8d037108ccc8fa354978bd0b0d7fb299085fcc", @typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffb17}, @typed={0x6, 0x95, 0x0, 0x0, @str='*\x00'}, @typed={0x4, 0x7}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001100010000000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c00008008001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 17:17:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240), 0x24, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x54) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 355.466202] EXT4-fs (sda): re-mounted. Opts: inode_readahead_blks=0x0000000000000000,,errors=continue [ 355.468128] EXT4-fs (sda): re-mounted. Opts: inode_readahead_blks=0x0000000000000000,,errors=continue 17:17:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x0, 0x5, 0xfd, 0x0, 0x800, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x3}, 0xc050, 0x0, 0x4, 0x0, 0x7000000000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6}, r1, 0xffffffffffffffff, r0, 0xa) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x40002000}) dup(r0) fallocate(r2, 0x0, 0x0, 0x8800000) 17:17:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001600)={[{@fat=@nfs}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socketpair(0x15, 0x2, 0x3ff, &(0x7f0000000180)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004e000087243f225a00050000000005000000000000000000001a000000000000"], &(0x7f0000000140), 0x1000) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '\']#\x00'}, &(0x7f0000000240)=""/75, 0x4b) 17:17:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x18, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x600, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x103002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x273c, 0x1c, 0x2, 0x70bd27, 0x25dfdbfd, {0x17}, [@nested={0x2114, 0x23, 0x0, 0x1, [@generic="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", @typed={0xc6, 0x78, 0x0, 0x0, @binary="ccfff20ba8929812e8a65c9b03139f15c7e5594d6aa40a5bffd8158d1aed952a6f8771680b5671429507186eabb9ebd8d25540fcc9e277ef5a1e00c56a64b87e7960b9bda280638caa32c40846bdc08db05cd8238d91be8173ac145913e1e5ab2720c697b4c93e9568ea324222a8e7aec77972825a38c8d56bf2699a0f05dc02e00e321211d5587b17b713cd32a35d47f1ce2e2a6ceb0d5f26720241aeeb79de99873e67b9d49c5ae3072ba25ba31f70c1186f51358741674478838a91c708835a74"}, @generic="7d7d247c7db8c7fadd84a7b0e09e96dda66b007ee6e41d2c214a46c67cab543dd3a0ff4939ca303593d08cea14d3311cf65a95b09b70cc1f3a30a02be0c7dc17c671be133b6a0a66306540535ce8dfcadcc45f40dee0f9d5d3667ee8bd26409c55081b6e179464bd2498d109dac67340c8cf012877eb0ef2e09d6296a3a3ce82c4736c8156d41bc800f48a617d3cc9cf4308fb6c480b8fbe23d9ff1052d6e22b30f1a678dfa9f887915311cca721c6fbd29b8c47c02cf8fd975227dbdcd11b5a2eede190c9f71b77cb31c8f2f0cceebf39f7ed113815c3ed6923d70e21df9c39598f503ba73b135b7c19ad1eeac0104a3252e3aeebeeced7796e2f0f4937d3c95d531721371d42a03ab3f4bbcbaa5d8ad0d0075d94823e4f84ac3fa35903aec177835e96178d151d821af949ef1374a1c1181462ff45f19e46f0a899dadf27eaa82b02e32e67e2ad63a9e6014f437a0eba849631baf2d2fb562647929b07dbf6aa166d4802a3035e31e336f6b1da4ed0fa52c158bcf11f8d76e02d7c6a40d5331ba47d8ae3459809a3d8829e7df5fa3f39eb2df99c3896e7c8f2ff33f4164eb275a0a3fe80e82157a37d2769b55d31e204467fc16575d3670f02bc1c2318645c02eb093701ab05ca52d84ef1be53c075792fb34bf4817695d785ef6a72545999f1fd0034cff8a37449424665a0df610fe66de8641d8de73a7b43b061e82855783564940557d39c9651ebf08948110d3ebcc6ee2726141f22af6cc5059123267441e49e3a00f2ca301db2d7ab8f6763d4337ac40d81916cafa5c082b21e8c6d57a8edbb6f061fb6b3b6b641de211b466b622bb694ab36eb3c226baae59f2d53f78bdf0114ea82ecb080fed6273031e48262aa95542d1fcf24a977aab3a106182270fa9bfb23ec27b25e03ca414f9c5ccb8db05518faaf64d239430462655a0cc0b1f7fe6963a69ec64d09455b1cd4e02b77d4e082df79bef4bd2266e58ff5f987ea1fb49755ca33f800e00c96e397592d2c04138123109ee668b56ef2958cd584e9e6b0091f0f4a768a61e76ca73b239da1ec6a493f5eb6c74d4852993b820b91018de6c80d1514788e8d105783ae242813c1ac553250d134e879c7cc5a636b3b2c9d57b71f428beb54775eb6d280e3606c2ef6d650c4df3453f5c0f98b2ba1bc6384b56c4995ede8c853df6c722ed79faa8b9ba65dd4f63021e5c58a16f4e5a3bf7a4ceeb1eed726f016267690fdb724c8933c969728d1715cbfa2302bdff25c06c141ade2433d523ea2c19ac616a7da3a855c9b41148a6da2079ca521778705f690948380dc5cc87b1f4553a6df68c7454829b95c35a2f5ec949ce063f8ca8a42e41de325e2d8efd8f41817c0dec5f4d9ac7870887558a9d82d5c76d7b8ca74d1a98ef7c6bb1941beea53ece78fcc0f7016df4c42b6f713688995db83f6ed993d45ebeb3161b65a4474b207f66d640fd7804e4c3de17d237b4ba93470e80b27141df9ae00371a230c376a85201bd8e46be0e84c3995d8627143e2d10a2b19d45d6d62c5cff3382976995a60d9ec3b882a4ce8d3f930d0682b79b5c795c8a70c043f91f37afa6a471c126f0e9c2333a16aada27302d1108693b61bb89ab771f90967ce3d886158ee23346a31978eb326d6cbcec23f4ef2e312c154e026346d50c7f6f462baf8c74023e4e5bec167e2ea31ad243fba6b197e332605e581f9d7f4a6475c133c49e522f4c3bccd12477b2c35d7384b02f506816682a7ba1ed80136ee74a89b5caf27b6aca36fac123484582526c288a62b8e5385c34db847f3507d076f8042f3e07d451caee5b1af6321646d1dc7ca65ef55747daa5942fceff44f2e8c17a41770da7d0487e28ccbc915372b289f1cbf9f1d83d97b29ff12f6a0c1ca1be9085c830b62c458b08a0c2ec8bbc1c8b6a22486bb8572c83295e3e47e3c151115f6e80ea95ef53bd13976baf1bbcdb194c3434b2e52c1e3dfc971075f5f3fc165c2b68ebd65fef26cee387d17de28003e1e016895ace3e42df55d394b17aa8c3718572c36bb36f12dc70ffdd418dc639c5237b128e926e96ffbb2a60ba2647d9bd62d91910a945a9d95e2391e9f88e2ddf33c0dba42e196f3e7ac04a481ee76841a8e3f474524281c6ed0c6b33cbb4b0feaafe71dcabd4948912499397be8b9aa426503f40a72ca16f498b0bb95c53129dd7795d66ad9b88e49aa7aee63498b00edad3dde2e6896c21921c2e3cdfca7fca0196f1ab2ab61feb944963ee6e1b91f65d8d8e1dc6e2c67108fde0510d8aa682cbf539674ec5a343380fac70600adb3e703dae1fffa25d0290248f356bd635d53d8653225aa9f6f422181e105d9c66095fb5e6f3b8a2b69ffe54aecca3f280d9e578ff12ea9e1c3771a5152754b8bc50d123a910c453d4507e298c17564925f304827946234ecb9c390b609d8576d57174ca1f945fb95f80b1fe548754f07f19ea83e1824c0b012374c543227065620655595fcde774cc88a75602b7a4cbc39c46881235a06790843a23e167b32b0adcae2772841afa30709f806836a280df964ad7f82273078b098ee6fa461dc224465265db8ca2d9586a19125a7233b81d603e2b3bf45b01050e0f223f8d142a442594f4126c7551b0e10eec8ef630da342c691662b669fbbe5af04df5c0d8059ec5c0d3c98b322d20ce397a15e3523c87818d7594e5eaa5468cd18f69822e2d40874c4b2e336ac8c2b3b0b36b90d2d78e31f3418e148b6b32b7bf5850cb7e529306a2162f1b686596bcfa5e30d143d012dea94cdc004d578d329eb60d5d6867989483ff2868a9e06252f7d8172d78aeb319a637bf4ba28db5f6a127e458737b4c9a82c65a417162c9f4ab564325a27457521ceeb41e0c2a44225c4c078d50784d490f09f3c5a4c344017407756f2decf02e57b0b604e2b1e9fbab004a8e8e8c3e427f63f891781ce0d92d10c0f2d44ba168173e0a09961207d32a635a69599c09c65432af9e46ecd7e21a7a560b41c528ef2416d0ce4119eac32aa2743d81db8e5a7c985719e31b6b07e5fbf74223ea93664f1e3a7726cb11bb65e8505a8c024b52556b587b7f46d6e898ffcc494c9df7521e4de648e98aa4670d24a1d9ac64ddebcf815f54f751ec4ba5afb96e5614e56f0bdb8d7de10ba8cebca6ce90ec2f1e931c575cdba29a5a1d671dfb7923ae4cd61ae7117312a0d4846b15e864b9eea812cf9d2b67ee592da44b4ff4885af455221371e934df8d9a3b99c08d97ee5ed52885c5ff7871e08ac24be8536dc6867b51db88501714605f7d0ce4a50ae6036e74f8674505ce42329bea0f879f8f0da618c650f6449c894065ae60333168464206c166fbe17e62aabf292d1aff352d28405e66684ff5d76102160bd209264ca1c716969afbb8719a8a5392e926ce5161c93264cada116e14e9eed04215144830e5dc2aaaed407f252acdc05a8402a972898d916fb38c7454e60ad88ce06380b39c4630aa6baaaa6bb3439c1ad2a3e08136f22237c940b5acdc999b608163f4daa632d566cf9b01c9e238d29a20dd63a0ac08b14d3770f9173bacc090199674259911492a7c4bd5549547d6a6cb4c48209b544db1a6d32100ed0cac1b62eaee0af748429d41aa663a9499ca91d178013d7e6551c64cc00f1319785945cbd56f2b0f4103f0f9f776c3474514121da9991d14aca7b2e7937438d3c3ce57fb1acba828ef209267a7667debbbe195e5b5bf986ee57575081bc284f6fb30aa6b777276374a423c0d0339d8e5098b7afff6266af977ccab8dad926d358a9e2177b2fca3d13d3b0642e70247420abfc31650c5a04813e624310f58424f8e1829a4100c6fc6bc2d2fa69054667f5060d3ceb59c7fe7a326fefb75957d9665c7d99cbe224b0ddf593c2ae4bbcd92c880ed846bf75b29c47d4c8d8aacbd3fca992d163318c60617612cbc8e47d1b03b6919eca78dc643d6f7921406f04c61b9e9a053201a23e01cb3a2b908bf7cb68cb60a6187d04d06d2d5b07e5d4334f73b586b8df0969459d5c23d68e72a2c8a3763c2696a123535e65287139adc0b3e5d3d88cc0c51abdca1c81fa130b1188423b856a2ef6ffdbbaac85571e541a217bc498974448ad81e24e4edf6e89684d0ef5e9e70f1e2c441cf9a69407d62a6e5d9be8650f3549b5360bcc269dfe02e5735023da08559156a32237f92cc3767f5a23de12b6ca2cc61af1fd792a3aa077b7c99176ec1485cce3d247d157e01568c7b227a0a0b5753867e4e12a76d001fc1395efea7fe1ffb8d72aa235d98f995ac631aa601dc9ced27446f5a8cfcbfc78af0151d3fbfa5a253a78714a930d33dec98b8598d6d6b2a1c7481533cbe72b3900dd4cc4443b1412612547ce37eb59c0641fd376e5662768fdc39954b7017257dc9c57938e1a142ad0b12f9be620e55d94ac77d68ed9fbb468f10dec2e8ff71430503f8c5142cfd002a637ef2c2419e15203f2b4190ea6735fe3809ffd82fe63be25e2af17582094d7feb21bdf60bb00d3a251a73d01ce20555c09460c740b9fc09ebdc3ffa1069380b13a455de18b3f2159d0d587c2d81f49ad48b27094a1323e74823a6eb0511a1e72427e36528a102ac17049ee1378f97006931705f56f66017e62270207650db5319dbb049da459a6f5ad6a19491e138b878ed1a6fd04b906c3630f6d78cd5011d68a069e54eff55a329c93d4c1f7c5e70c72db50da7528e5d6c870f19ed42cd33637cd8c22c192957e7617a768ebf208f5e8f51af3c4864873f71a355b18c4afd18b72ff83d56f006f6dbac51b7b75a0e37df880633be813264a424e6b3d3824e1124d5b335612b2cb55728ef480d19b3cd1c77b23ef81adb2aa0a311ede13a1bbea657431d1721944ddc2b9819dbdf0fad5408d82285e7610c9e84861552d867dcd43f3cc27f173982b7d881a5ed1b002ab4d516e69ce7ba6c3fecc869e92cbcf0467068ab51df6d60bc7821b3234686d52b1089ea0980614a97f671a5894f3179b9aed3064cc01e9e4725c4cbd9c1981583ab9078217aacad0b5c0aaa0c235c281ba941c7d5edde5d619da993fe8420e50b4413ecca7beeca889a8598ddb972edecabb65423cda0d76692566d73c11b561ae9d8e1fd4278568f5f9a721c31cab2bc185b34e8ab7f3d415e3042e8c0ba57a5b3dfcfb8471514269b51f40b5ed122e1106b342057399be2118000c04813a15de35876c57f0ff8f99ada306e1f6e30b08b2d4e354a0812990715986dcd63a0fa167e788ae0f70d76cdccdab6e6e2095bb6072dfbd0beee657c14316bd1e9369fcd3eae05841b2257cbf57ea6077e7f1d8726a50bcd16d5bdd0d72fafe754c6f02e905ee7342d886231fa2b009321b883111c39e733b57bbe681363badf0fc5da70ef9cf246bbeade31363df3d4e53c7b51b4546a4717a9f587898cae96f7e74f14e364ebbd2601f44c92bb45d5b848c8707cb4ff7692e35969d2052fee12a46e4bf2bcb44bb3c3479708b738c6eae71654c41e7c6cad4ef823f18baac4aaa7cd1bf896d544d1a02418db1543f6395ab18b02df156b70de5162bade428c260ee7eeb7bdb28db3c09afc0ed2de03bb807a200f61902d56616370299950fd6dfd825fc775a2cc7989b5feb891d36ad61ad0f253d56891d7c2b9c8758424c51ec19151f9c5af3e4553135c2ff7c3b9f30e1c52f2afd93239725b4714028869c49af6cfc61ecfd6f7b788cfcec869cb95fb2e333bb7707b71f9a3fa4bd5fa104085b15b43a22158304400448d663c12bbd40507436ea43bd973c35fd", @typed={0x8, 0x3f, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x53, 0x0, 0x0, @pid=r3}, @generic="f7cd2e9faf91c52e288c0dc6e92b6cce5992909a8aaf2ddfdaef6fcb6411ed3ce84b3924", @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@local}]}, @generic="b9887c57a12aa9e32eb8b53552a52f15972a3e969d67a53020ca41873e5c0fde235cb1ba02a05ed84b01111f9cae7f631a1628db28bdea0b20c1c8db60e6e0bbc80e305f7ffd1fc862a1ce8ca2774a36cf04fd75b40e164c9b81ed92b331d35777221f69a7526240e0b68d7f980be9", @generic="5cd7c90119cbbc6986788e8b770c502bcec29ac4bb8893f82d04695c02485e94825594b9133b548e2bf6e314fb8ce7d2ad7831d213837442e52fa61287deda14a0e22775cf816a77961d180147431005923753df4759c51aa0adc7f92fd3eca3a5427324d42de448638bdb83c2f5a56b76e0d57b0470b372cb0d2ff20248f7c8496ee4bcb3483bf7bbac5968fd098f2af61ada3b51b9a6733dde77f734adc2b76aa79d85ead5af7273f269cb16ba892398ed0702b3e718e6941676c09b2799d0a75c36d360e746a0", @nested={0x9c, 0x79, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @fd=r0}, @generic="4dfde99ba48a7d0b9551373763b040b67d570f0c669d5754a9ea336dec86f9fe41cc4fd99b0c7e261af7f77303b976be84d8265622468703a32a13d04f9c7cbadbb0e458e286dc83359e1f01c59a33b3365ae83d39e8b1c21b97853cb56d6ff7279ecf756f72b161a8320e736476cd00940ba98af9722eb5b857a604a3b2099b936893817bda9ea4edcb410637aece62"]}, @generic="06fac71080342a35ac7181ed9f8a8474be00869bd218738d81bd536039b79c808999d3fac8f969", @nested={0xff, 0x5c, 0x0, 0x1, [@generic="a8296208cee76cd2990ecd7ca113a1fa9144e316", @typed={0x8, 0x52, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}, @generic="4da72d087498e9ecacb9d96c4ee6ca161c4771bbf7e0175359bfd0b0c467ce61a246dd1d228830d7a72496b1b9c957ca9e40fb9ea0a59adbad2c1ad4995b11892b949e7c6ee34718ea21e7e984e6dbde80fcfcb7fb7946fab1127ffa7fd5ef06c30fe8c24da784bf277b65f4eeeefd5ed4d617498adfaf2bfcf14a6d9218913cc14d9601aed666f480eabd413064f62f7175a45f4ff0267aa8de0701ef14a09ab903631c9600ed99431ee90fc39d6807d8addd43947114cc6aa464130e79ac2c146fa93323e1a32e329ea1", @typed={0xc, 0x12, 0x0, 0x0, @u64=0x80000001}]}, @generic="41007e5730087c9664ef36", @nested={0x2e7, 0x47, 0x0, 0x1, [@generic="a722a26fe4434bf7242f7490fc948b3e33dc5d094732c1678169592d3f5d2a8b31d1a0fba88280c4e5f7a6cc908ac74c299cc77ff1f2fa904ee0d109a1176cbd9b564de1632771fb77cefe88ec3a2bd94ff80fcb126b02e91cdfe986e0be92bfe25efb1286ccaf114af9a0971dd177bca7d032b7389f46798c40d25a0d22177c2450275cdb8457d218e498637abca9220c4265051b4ab280d16f2805f8ac7b838ee75500b493ac2c515444a7d3ad572c13a620f1d93ace6c", @generic="d439d64b06", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0xe1f}, @generic="03b4dcaeda155ce857f9411fe28c089777b01618", @generic="6397118bc31f449c6acd05a44b18a55d2bd08d16991a6b5cca77f47a652897b20c3f42f4bbe271c5084b84682b2d7d1e25122da45672f32765b7f1ca524b3bdc7a184679ca5db0506731b890b5990c2bdbee232d0c6207235a66804f524a4c8e9b5ec244c8e3ec67e3bcc08f9b587e149f394fb017965f1230f29077d3728d786b2c3044c528a31421cd41dab8eb7791476d6b380119dbe62397afc80231b546ad2dde197f267ac55271b98a323f28e8c4", @generic="768f47df51fc4052701ee2cd636d13ce31df358fa8e34dce8aa185bfd627937b0ff89c4ab72e876589946051b0fa286f915e27ad8e185f5bc235dc78c839dfafb3bd9f709016b28a42a25a00192a875e374e5301adf7c6a13d92eddfb96487252b5ed848ff86630692e45bc3473a942b7fa0f2193a0e0c658e31923b171f4dbca0e8f6e16e3b6e650b5a601cc0c12d6c7e556ed76fe84ebaf1650ae522", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="71521363bdbcfe2a3441247247570435bd0131290c2ee38b1231518b30e4bd477b9758f84a58c794994bbeb6309c18a93ccd2ced47a967f918730e6a43b2c3bae335eb29f4136b340468b869199d73e2047bbf7ca797753c217041766d6a0137bc0671afe29131fb31e5c6332eb0a2afc1692654fd8f46d9a184e4eb5b194166a7594ab4af3e16d6f800e273ababdd760022844b15b5fac572b1c3d67edfff840b9ee4cafe701f42"]}, @generic="de8e01808813cbfb8052013b6e75eaea19f35f8479fe662d4582bd8b373f", @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}]}, 0x273c}}, 0x44000) 17:17:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, "fa249008001ce1468400", 0x4}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 17:17:36 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001e00)={{r1}, "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"}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x81}, 0x16, 0x1) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,porx=0x0000\x00\x00']) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) clone3(&(0x7f0000000500)={0x800000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x36}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000000400)=""/77, &(0x7f00000004c0)=[r2, r3], 0x2, {r4}}, 0x58) close(r1) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') 17:17:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fork() getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r8, 0x4, 0x2800) r9 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r9, &(0x7f0000000800)={r3, r0, 0x80000001}) r10 = dup3(r9, r2, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 355.627498] 9pnet: p9_fd_create_tcp (5910): problem connecting socket to 127.0.0.1 [ 355.631418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:17:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) [ 355.647598] audit: type=1400 audit(1629739056.733:19): avc: denied { checkpoint_restore } for pid=5914 comm="syz-executor.3" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 355.653851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 355.670135] 9pnet: p9_fd_create_tcp (5919): problem connecting socket to 127.0.0.1 [ 355.675144] FAT-fs (loop1): bogus number of reserved sectors [ 355.676041] FAT-fs (loop1): Can't find a valid FAT filesystem [ 355.759626] FAT-fs (loop1): bogus number of reserved sectors [ 355.760371] FAT-fs (loop1): Can't find a valid FAT filesystem [ 367.769316] kmemleak: 19 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:17:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000000) mlockall(0x1) 17:17:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 17:17:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fork() getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r8, 0x4, 0x2800) r9 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r9, &(0x7f0000000800)={r3, r0, 0x80000001}) r10 = dup3(r9, r2, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:17:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70243, 0x0) unshare(0x28020600) unshare(0xa060000) r0 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x4) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 17:17:55 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001e00)={{r1}, "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"}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x81}, 0x16, 0x1) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,porx=0x0000\x00\x00']) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) clone3(&(0x7f0000000500)={0x800000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x36}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000000400)=""/77, &(0x7f00000004c0)=[r2, r3], 0x2, {r4}}, 0x58) close(r1) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') 17:17:55 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fallocate(r1, 0x10, 0x1, 0xff) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 17:17:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fork() getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r8, 0x4, 0x2800) r9 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r9, &(0x7f0000000800)={r3, r0, 0x80000001}) r10 = dup3(r9, r2, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:55 executing program 1: syz_io_uring_setup(0x550c, &(0x7f0000000080)={0x0, 0xa64a, 0x2, 0x1, 0x317}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029578ec3f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020100035ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200035ec70325132510000ec70325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x100000001}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) unlink(&(0x7f0000000040)='./file0\x00') [ 374.533534] 9pnet: p9_fd_create_tcp (6053): problem connecting socket to 127.0.0.1 17:17:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:17:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) write$P9_RREADDIR(r0, &(0x7f0000000140)={0xa4, 0x29, 0x2, {0x3, [{{0x20, 0x2}, 0x9, 0x6, 0x7, './file0'}, {{0x40, 0x3, 0x7}, 0xffffffff, 0x73, 0x5, './mnt'}, {{0x50, 0x0, 0x6}, 0x5e, 0x1c, 0x5, './mnt'}, {{0x80, 0x0, 0x8}, 0x4, 0x7, 0x5, './mnt'}, {{0x4, 0x0, 0x8}, 0x5, 0x81, 0xb, './mnt/file0'}]}}, 0xa4) mknod$loop(&(0x7f0000000300)='./mnt/file0\x00', 0x2000, 0x1) 17:17:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000b40), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="155b48376ba1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 374.734113] Process accounting resumed 17:17:55 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(r2, r3) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) r5 = dup2(r0, r4) close_range(r5, 0xffffffffffffffff, 0x0) [ 374.792276] Process accounting resumed 17:17:55 executing program 6: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {0x0, 0x0, 0xc8000}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="9447ec5de645d8cebeec1ee30fb25291aee2161f6d9ac14b0ddd7e838c0000"]) 17:17:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:17:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) [ 374.926753] audit: type=1400 audit(1629739076.012:20): avc: denied { watch_reads } for pid=6186 comm="syz-executor.1" path="/syzkaller-testdir292357024/syzkaller.VdsQVV/31" dev="sda" ino=16042 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 [ 387.483890] kmemleak: 26 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:18:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x708, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "89bb6d2e3f7175c8ef260eb48dd418835c05d41993451060213082e1231bbcb64bc27b39b5f45e60e3fa4027214946afce6d896cfe7847cdbaeca84bf921dbdbbc7c3048a3e65ae29c6308e7d45d82d45123bc95e685695dde6da0b1278074d5da3709aac27cd164b1dc9d7d1a72c8d949c4dc9300d1565c9ae537263298bf61e41bb7e70642cae1e2c82206609bfe53e21cd745a35c1e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc5}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!^-.*!)\xe0!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.+/%}^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.^:+\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']/&)}[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')A*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3dcf0acf}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4425}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',.@\'-)[*&$:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x24e39330}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '(\'}.)\\$\xae-.+@,#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%${\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x409}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x44c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[!#Y@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[$\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'D\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%,}#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#]-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/)+&-,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "7324c4324bf8dd996fc60278ee4e2bdc284c1144b557"}, @ETHTOOL_A_BITSET_MASK={0x82, 0x5, "840c955eed118af704664d10666a7468325efb245ba1a13d98bbe5c9153b389e5c96490c0a19609f0e71663e89dc428ee75afe32dcee84d11792183a80f883fb9a5a228916192a52eba4fa335d4244a680084d61197998a9edfebab30b468f1330ccdc1690e4023a185b53f333d2eed2700bdd3ea1869168914c584b14bb"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '},\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*/#)\xb7\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(-![\xf2:\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb1$\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5b}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.\xd1[{:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87dd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '},/(~+{{-%.,}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '(}%\xe5^#)/}--]$\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '^^\t(&.^[:&(--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+#[-\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x21, 0x2, '\\+,-.\\^%\xe1[:%$\xf6(\\@:^/]\'}!(%@-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!*&-@[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+j.}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/-\x04:,}^^*(\'$)%[.;]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x708}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 17:18:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(r2, r3) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) r5 = dup2(r0, r4) close_range(r5, 0xffffffffffffffff, 0x0) 17:18:14 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:18:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xc}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='#}{-.\x00', &(0x7f00000000c0)='./file0\x00', r0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000180)=0x80, 0x800) unshare(0x48020200) 17:18:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0xc74, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x23, 0x37, 0x2, {0x2, 0x7, 0x81, r3, 0x5, '--&.}'}}, 0x23) 17:18:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000000) mlockall(0x1) 17:18:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x2c, 0xc21, 0x0, 0x0, {0x0, 0x2, 0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@mcast2, @private0, @mcast1, 0x7, 0x4, 0x6, 0x400, 0x5, 0x210000}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25026c, r4}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x123080, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020029bd70000000000006000000080003000000000008000200000000001400018008000700", @ANYRES32=0x0, @ANYBLOB="1e060005099b1b6a5c9d2c280005000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x4008804) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}]}, 0x88}}, 0x40800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c1}, 0x40000) [ 393.670607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.759029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6347 comm=syz-executor.5 17:18:14 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 17:18:14 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) [ 393.816457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.859453] Process accounting resumed 17:18:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x40081271, &(0x7f0000000000)=0x200) 17:18:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10008800) 17:18:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:15 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:18:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup(r0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, "53495622ba4ceab7"}) [ 394.039243] Process accounting resumed 17:18:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xc}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='#}{-.\x00', &(0x7f00000000c0)='./file0\x00', r0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000180)=0x80, 0x800) unshare(0x48020200) 17:18:15 executing program 1: ustat(0x0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2, 0x4, 0x1c}, @random="00ded1f4ff00", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="64e7d326c1e3", @private, @multicast, @remote}}}}, 0x0) 17:18:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newspdinfo={0x64, 0x24, 0x1, 0x70bd29, 0x25dfdbff, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800) fcntl$setstatus(r1, 0x4, 0x2800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0xc03, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000008c0)={0x4000, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@acquire={0x428, 0x17, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, @in=@rand_addr=0x64010102, {@in=@loopback, @in6=@loopback, 0x4e24, 0x0, 0x4e22, 0x7ff, 0x2, 0x0, 0x10, 0x2c, 0x0, r2}, {{@in6=@private1, @in=@multicast2, 0x4e23, 0x5, 0x4e22, 0x7fff, 0x0, 0x0, 0xa0, 0x5e, 0x0, 0xffffffffffffffff}, {0x7, 0x1000, 0x1, 0x7, 0x0, 0x2abf, 0x81, 0x81}, {0xfffffffffffeffff, 0x6, 0x86fd, 0x6}, 0x3, 0x6e6bbd, 0x0, 0x1, 0x0, 0x1}, 0x10001, 0x6, 0x9, 0x70bd28}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@local, 0x0, 0x3}}, @mark={0xc, 0x15, {0x35075b, 0xd434}}, @migrate={0x180, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0xff, 0x4, 0x0, 0x3506, 0xa, 0x2}, {@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, @in=@loopback, 0x32, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, @in=@private=0xa010101, 0x33, 0x4, 0x0, 0x3500, 0x0, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x1, 0x0, 0x3507, 0xa, 0x2}, {@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@private2, @in=@multicast2, 0xff, 0x3, 0x0, 0x0, 0x2, 0x2}]}, @migrate={0x134, 0x11, [{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@loopback, 0x2b, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@remote, @in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5e, 0x1, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, @in6=@private0, @in6=@remote, 0x3c, 0x2, 0x0, 0x0, 0x2, 0x2}, {@in=@multicast1, @in=@loopback, @in=@private=0xa010101, @in6=@empty, 0x2b, 0x1, 0x0, 0x3502, 0x0, 0x2}]}, @lastused={0xc, 0xf, 0x8}, @mark={0xc, 0x15, {0x350759, 0xb7}}]}, 0x428}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newae={0x68, 0x14, 0xb0d, 0x0, 0x0, {{@in=@private=0x200000}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0) 17:18:15 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) [ 394.298608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:15 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000800)) syz_io_uring_setup(0xe96, &(0x7f0000000740)={0x0, 0x51af, 0x1, 0x1, 0x15b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) r5 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r5, r3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r6, 0x4, 0x2800) splice(r4, &(0x7f0000000540)=0x9, r6, &(0x7f00000007c0)=0x5, 0x7f, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000640)=0x80000) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xfffffffd) io_uring_enter(r1, 0x2271, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x20001}, 0x1) r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000004511418000000000000000000000000000000000000000000000000ed8100001a040000def4655fdef4655fdef4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000060000000000000000000000000000000000000000000000000000000000000000000000000000000521cdd1d000000000000000000000000000000000000000000000000ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3537313433343433382f66696c65302f66696c65300000000000000000000000000000000000000000000073f249de000000000000000000000000000000000000000000000000ed8100000a000000def4655fdef4655fdef4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) unlinkat(r9, &(0x7f00000001c0)='./file0\x00', 0x200) [ 394.326835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.423858] Process accounting resumed [ 394.526613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 394.528143] ext4 filesystem being mounted at /syzkaller-testdir292357024/syzkaller.VdsQVV/36/file0 supports timestamps until 2038 (0x7fffffff) [ 394.555094] EXT4-fs error (device loop1): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 394.586610] EXT4-fs warning (device loop1): ext4_empty_dir:2884: inode #12: comm syz-executor.1: directory missing '.' [ 394.620506] EXT4-fs error (device loop1): ext4_validate_block_bitmap:398: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 394.654134] EXT4-fs error (device loop1) in ext4_free_blocks:5528: Corrupt filesystem [ 394.667200] EXT4-fs error (device loop1): ext4_free_inode:353: comm syz-executor.1: bit already cleared for inode 12 [ 406.920348] kmemleak: 62 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:18:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000000) mlockall(0x1) 17:18:34 executing program 1: unshare(0x28020600) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) lseek(r1, 0x2, 0x0) 17:18:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:34 executing program 5: r0 = getegid() setgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r6, 0x4, 0x2800) r7 = getegid() setgid(r7) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000180)="bdc1d29cf3a70c8c3f55654a35d8dbc87e600d78aba009cea2ec533566a889cc1aaafb11014a10c6218969f00f065044b906f190f723bb94bef37da99045b5f17e9f709b31b851343dd78d19b3a0bc88ec5658aa63cda54bedfae58963c4363d115780470807708f1a", 0x69}, {&(0x7f0000000200)="71fb5c5dd65d93f4f61049f4b67d2fb9aab8916b566a67d7e361e91a28ce7158672e4c5bb90e92784030e98ddab02cd06fdb817081188010cd37bc0e59b10ddff20d452122aa3525dcb4932795e1ac63605d9d1a8a47e1b3a1d92cc26c784b797db06fc80a482d6f2853da96954cdb7eef9efb330ccde8a90e6f156519625fd9b68f7a61ae492077ae5db2118211e416569696cfe06413762cb240e08df64e9e59", 0xa1}, {&(0x7f00000002c0)="aac628279e8f7795ad043b50a30b42ac933190b50f23d8b2225504ed52cae7fc88168f4a6f14292273e5e50d1af7ef19bef1cda32758", 0x36}, {&(0x7f0000000300)="42152a3315285e4947a48fcf2d7a72ce3e220a3c5a0b6efb08b67fc1d4d281716f5720f1d9214a4aab4f1add50cdfe5258cf47ff6dd37d0f0d646b31287a2b778a756da17b9605f71e12418674ff1824214e5d4f3316076ed1d737ef6da2e3e785bbfdd16a986550de7cd58b7ebab6ff9f83c8221d0533007e69d80398475ab20726ebe28b8554577f0b6602a495beb3101c5505f78eaf72967a6340a5dd92b0992f56c57b2558928d14109616c7519bdf42aacc94e470", 0xb7}, {&(0x7f00000003c0)="d5c65794e3ccd4498412327173ce534e63174d3dcf7d93998d72805fcae168931bba6eb1f7a95d5e24987d3da9f63d6b9b783ef15d559007332a9fb1b7f12b86870a7a", 0x43}, {&(0x7f0000000440)="a859720ed75b3a3859f451f0cfda850e9ac837ac537fe51f1ce49736dbb9bac7348857e2182289cf0980621fcba2756dc4a5bdc97ba63cf545bc5064ed16ee87bb49de4d50b18d83009e5c8eecbc391ff53406b3576c14a468b944fad8a93cf0b23a01fd0bbb035ec77b3b0594b98fddcc0e1fc207a7a9bcd12684ddfb0ed5b6e540f4c47f7bdb9194735f", 0x8b}, {&(0x7f0000000500)="fdd7e2c0d0a374f7dcbfbe57efc8ecbebe8c25688483525248be040fba942933b842dd6a9f3146eba771129ee24753242103a9be35b711b5061b471d1f89597f2ac47837aae1af4cfbbbaf07f03d4310aa48c80c163de24969120fd7bb6e9404474484dc4ec293b14a77dee67a0a8da40bbfb56abec3a4015f0012a335e5bc8c70c26fbeb008a4a63c9e4cd0", 0x8c}, {&(0x7f00000005c0)="af677c5c3921df56892aac47438227ad7166be03852b6224c4b6ba60be9085f87dc4ca72b2f888b1782e5285902c658e", 0x30}, {&(0x7f0000000600)="6dc964d63d6a6f7f50a3c5b4f537747b3520671cdbb5b65b49f88871744a787a12bc775b087ab70b14463d10d7152aff35ed00f9e452f1550ceb03d4abfa602e852d406198fc8ae9f6ffa488647904884d50614c3979effad200dd63c705e2e0db82b8b79a5ac11a963cfe28370d1a3dfddb3b09caac3c85ede82961020a24c08671e153bd45b685841f21b7d1b43231eb641a366704a47bc7160994d201c4ba651d120dcc92bb008c7317604c26b5e073daa1c9e7ec43d78bee7d91d2df3fea025f3752a815125843e7698d79a058440cf3d0e3", 0xd4}], 0x9, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [r2, r3, r4, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r7}}}], 0x50, 0x40000}, 0x20000000) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffffffffffffffc0, 0x0, &(0x7f0000000240), 0x2080041, &(0x7f0000000080)={[{}, {@map_off}, {@check_strict}, {@gid={'gid', 0x3d, r0}}, {@map_normal}, {@map_acorn}, {@utf8}]}) 17:18:34 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:18:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0xc74, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x23, 0x37, 0x2, {0x2, 0x7, 0x81, r3, 0x5, '--&.}'}}, 0x23) 17:18:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 17:18:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313539353330323300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="200000007412ebff0304ab4100aac700c9fc655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000daf4655fdaf4655fdaf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766000000000000000000000000000000000000000000000000000002010b1b000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746100"/192, 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000daf4655fdaf4655fdaf4655f000000000000010004000000000000000100000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039c34d38000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3800}, {&(0x7f0000000440)="ffa1000026000000daf4655fdaf4655fdaf4655f0000000000000100000000000100b3142f743fd111ab1c196c18141dea706d702f73797a2d696d61676567656e3731353935333032332f66696c65302f66690000000000000000000000000000000000000000000000000026908b4400000020e909521543673700080000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab41e57fb295aa9b81e05205c4109f40882a57102d039a20c5e458d916f90e3a8700337cccb88101f12d2ffac9ac680da71cc4f6c9e92275c3932bd1ac1b8fc8", 0xde, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000daf4655fdaf4655fdaf4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb34f3d3000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c91b90e27000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)="73797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cbaa0a1fdcc938c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b61", 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) write$P9_RREADLINK(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10) 17:18:34 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x80000000}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x8}) [ 413.279127] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 17:18:34 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) 17:18:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x5f, 0xa3fb}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000001640)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 17:18:34 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = signalfd4(r0, &(0x7f00000000c0), 0x8, 0x800) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth1_vlan\x00'}) r3 = socket$inet(0x2, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 17:18:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 413.488645] FAT-fs (loop1): bogus number of reserved sectors 17:18:34 executing program 6: syz_open_procfs(0x0, &(0x7f0000000300)='oom_score\x00') r0 = syz_io_uring_setup(0x2945, &(0x7f00000190c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000191c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000019200)=ANY=[@ANYBLOB="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"]) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 413.490092] FAT-fs (loop1): Can't find a valid FAT filesystem [ 414.296739] FAT-fs (loop1): bogus number of reserved sectors [ 414.297597] FAT-fs (loop1): Can't find a valid FAT filesystem [ 425.809917] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:18:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100098e670325132510000e67032510300000000002e2e202020202020202020100098e670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098e670325132510000e670325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dc1ddd53afae2ff9a4be90d5998bb8cee50ea18adb6a258d120ec37ba03d4da52c639b4a522bec7b0451bc01eff31f5abe5b541caa6e6fb60aa287c99527f53d970c7edd75c428412e47a64ae3b691f08f4a7435aa64ca86c1e552a92c69b213cb"]) creat(&(0x7f00000000c0)='./file0\x00', 0x102) 17:18:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x29, 0x80, 0x1f, 0x7, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, @remote, 0x1, 0x40, 0x6, 0x7}}) r6 = accept(r1, &(0x7f0000000300)=@tipc=@name, &(0x7f00000000c0)=0x80) sendfile(r0, r6, &(0x7f0000000380)=0x6, 0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="d00100001b00000027bd7000fddbdf25ff010000000000000000000000000001000000000000000000000000000000014e2200004e2000000a0000a067000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="3f00000000000000000000000000000000080000000000000700000000000000a30a00000000000005000000000000000400000000000000080000000000000006000000000000000900000000000000ff7f00000000000006000000000000008d5e0000000000000001020200000000"], 0x1d0}}, 0x0) 17:18:54 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2", 0x2d}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x1d66}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000011200)="000000000008000000000000000000000000000000ffffffff1d40000000", 0x1e}], 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x1, 0x8, 0x2e7, 0x3, 0xff, 0xfffff133}) sendfile(r0, r2, &(0x7f0000000000)=0x1, 0xab9c) 17:18:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:18:54 executing program 6: syz_open_procfs(0x0, &(0x7f0000000300)='oom_score\x00') r0 = syz_io_uring_setup(0x2945, &(0x7f00000190c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000191c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000019200)=ANY=[@ANYBLOB="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"]) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 17:18:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') pipe(&(0x7f0000000080)) [ 433.326418] FAT-fs (loop4): Unrecognized mount option "ÜÝS¯®/ù¤¾Õ™‹¸Îå¡ŠÛj%Ã{ =M¥" or missing value [ 433.346479] FAT-fs (loop4): Unrecognized mount option "ÜÝS¯®/ù¤¾Õ™‹¸Îå¡ŠÛj%Ã{ =M¥" or missing value [ 433.355852] audit: type=1400 audit(1629739134.441:21): avc: denied { module_load } for pid=6772 comm="syz-executor.6" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1097 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 17:18:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:18:54 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2", 0x2d}, {&(0x7f0000010100), 0x0, 0x4e0}, {0x0, 0x0, 0x1d66}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000011200)="000000000008000000000000000000000000000000ffffffff1d40000000", 0x1e}], 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x1, 0x8, 0x2e7, 0x3, 0xff, 0xfffff133}) sendfile(r0, r2, &(0x7f0000000000)=0x1, 0xab9c) 17:18:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x2, &(0x7f0000000140)="6a84f948001c861d8c02b4d26db5805a9326f4e5cae1731a685412e8887565a7ffbaac2713fa97f2470f6fc83cfeb52550f6b8fab32b87666b4dd9161a492bcf4ef914c10d9c477cc100075458144c1f29b919d169d62eaaecd4340c056805b960430817fbf121ea0bfa4b0f97d0544ded353c6719", 0x0, 0x0, 0x1, {0x2, r4}}, 0x6) 17:18:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) [ 433.546519] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 433.559960] Module has invalid ELF structures 17:18:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:18:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:18:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') pipe(&(0x7f0000000080)) [ 433.605140] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 17:18:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 433.742964] FAT-fs (loop5): Unrecognized mount option "subj_user=" or missing value [ 433.819404] Module has invalid ELF structures [ 433.835262] FAT-fs (loop3): Unrecognized mount option "subj_user=" or missing value [ 433.905088] FAT-fs (loop4): Unrecognized mount option "subj_user=" or missing value [ 445.072508] kmemleak: 42 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:19:12 executing program 1: syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60040000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000007060101020000000000000901020073797a3163e67ce84cf691290000f3ff0000090000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) unshare(0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000380)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89ju:\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\x94\b7\x1a\x02T\xe3j(\t\xb0w\x8d\x178\r\x17\x9f0\xa7\xfd\xa20M\xcf67\xad\xf2!\x9f8\xddS[\xd7Z^\xd9\xe9\r%&r\xab\x8d\xb5:\xeb7)Rz\xfeD\xe4P\v\xd6\xdd\x19\x1a\x88L\xfdEH\"\a\xb8\x19K\xa3\xb2\xd0\xde@|\xe4\xa1\xd8d\x8fv\x13\x8c\xb3\x1f\\\xde\xdc\xc5\xf2\x9e\xe60\xf6j\xb4k\xa6{\x05\xee\x80\xe7\x0f\xab\xbe\x8a\x06\xb2J\xdc\xe2CL[\xeb\x96~hE\xec\xa1\xc6\x8eV\xb9\xe8\xf20\xbbc\xc5ykU\x8d\xb5\x8f\x9f\x13\x03\xae1\xa5q\x8f<\xa6\x97\x85+\x9f\xc5\x93\xab8\x14o\xc1\xd1\xb3\x18/\xac\r\x8d\x9bG\xf9\xff\x10\xe6G\xa1L\f\x05Y\xac\xbc\v\xb3\x92\xfe\xcb\xfd\xba\xaa\x14FQH?Q\x11\xf7\xa3\xed9\x1e\x85\xbe\xd8h\xac\x11\xf4\n\x85\xad\x11N\x18\xa8b\x8f\xe5[\xd3\x8c\xfe\xe5\xed\x90 \x18f\x0e\xe4\xa8\xd3\x8d\x9dF\xaaa\nz\x9d\xad\nA\x88\x96*\x98}/W\xbf\tC\xb6\x90D\xbe\xa0\r\xfa<\xabG\x19\xe2K\xda\xd2\xf1\x8c\x05:\xa7C\xd3\x98\xe5\x161\x1anK\\\f@\xef\x88\xa8\x01\xd7d\xf3j{/\xca&f8\xe6J\x1bF\xf7\xad\xd1\xdb.d{\xc7[\x89\x96#\xd8\xda|\xb3\xc3\v{:\xc0c\xfe1N\xe2\x1a8\xd2\xafkF\xc3\x16\xa2\xb6N\xd7\xc1Y\x1e\xf1\x93\x87.\xcbh\x95\xb1Z\xbb\xcf\a\xed\xde\xe7z\xc7\x83\xdb3\xe3^\xd7\x90V\x1e\x91\x87\xb5e\x90\xa1\x913\xc0\xbcFN^\x84\xcb\xa3M\xe9\xed\"\xf5\x8a\x87\xf1\x87\xb9>\r\x03\xf6\xb8\xb2\x88\xc6\x1a\x0f\xd0\x8c]gs0\x9b\xdb\x8bv\x88\x97\x8b\xda\x0f\xfe\x99#@\xbb\x99\xac?\x17\xc5\xbb\xf1@\x01\x12\xf7jh\x11\xb8\xac\xdb\xd8*t}\xb8\xec\xc0y\xa6bm@\x1f)\xbel`\xf2;m^8\x89I\xab\x94\x1dF\x7f\xb4\x0e\xa3\x18H\x8b\x8d\xe0\x12 \b\xc6PW\xaa\xf9Y\xd6\x03\xfa', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000280)={'caif0\x00'}) fcntl$setstatus(r4, 0x4, 0x2800) r5 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) copy_file_range(r4, &(0x7f00000002c0)=0x7f, r5, &(0x7f0000000300)=0x401, 0x3, 0x0) syz_io_uring_setup(0x73e6, &(0x7f0000000000)={0x0, 0xab76, 0x1, 0x0, 0x351, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) close_range(r2, r3, 0x2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {}, 0x2e4, 0x0, 0x0, 0x0, 0xb}) 17:19:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:19:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') pipe(&(0x7f0000000080)) 17:19:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r1, 0xb05, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa903, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x3, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xf8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40095}, 0x105) 17:19:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, 0x0, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:19:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x200001, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0xe0ffff, 0x0, 0x2046034, &(0x7f0000000180)={[{@grpjquota}]}) 17:19:12 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x121400, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@mcast2, @private0, @mcast1, 0x7, 0x4, 0x6, 0x400, 0x5, 0x210000}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r4}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25026c, r4}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x123080, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020029bd70000000000006000000080003000000000008000200000000001400018008000700", @ANYRES32=0x0, @ANYBLOB="1e060005099b1b6a5c9d2c280005000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x4008804) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}]}, 0x88}}, 0x40800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040004}, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000080)="0243443030310100004c0049004e0055f95700200020002000200020002000200020fe1f00200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x0, &(0x7f0000000380)={[{@overriderock}]}) [ 451.530946] device lo entered promiscuous mode [ 451.539451] device syz_tun entered promiscuous mode 17:19:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x10009fd}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0087651da61bf4e66a8994dfa825f9af763707dc9b6e79243fde2c75ea564be29b5bbfdad307a9f6a2fa61f4575f18578f77ab856095a5be2a7b46b235376c3ad602567b47459385454e1f18c8438bdb481c0f4a"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 17:19:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 451.660762] Module has invalid ELF structures 17:19:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') pipe(&(0x7f0000000080)) [ 451.676084] isofs_fill_super: root inode is not a directory. Corrupted media? [ 451.726705] Module has invalid ELF structures [ 451.852820] device syz_tun left promiscuous mode [ 451.858811] device lo left promiscuous mode [ 451.869202] device lo entered promiscuous mode [ 451.871826] device syz_tun entered promiscuous mode [ 451.888550] device syz_tun left promiscuous mode [ 451.894839] device lo left promiscuous mode [ 463.794911] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:19:30 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') 17:19:30 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xe20000, 0x2) r1 = creat(&(0x7f0000000240)='./file0\x00', 0xa0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f0000000300)=""/214, 0x401}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0xff, 0x0, 0xff, 0x0, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x82, 0x0, 0xdf, 0x7, 0x2, 0x702a, 0x5, 0x0, 0x8, 0x0, 0xf214}, r3, 0xd, r0, 0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r4 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) close(r1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x62, 0x7f, 0x9, 0x4, 0x0, 0x10000, 0x92986, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x769cbbbc, 0x4, @perf_config_ext={0xac5, 0x8001}, 0x10030, 0x8000, 0xfffffff8, 0x0, 0xab, 0x1, 0x123, 0x0, 0xffff8001, 0x0, 0x1}, r3, 0x5, r1, 0x2) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000440)="f181afb66dc3b4d11d0d3e75bac0b008e79aa7a20793002155a2f40f7ceaae77d8941578af9df7359263d7bca90fd3f4fe063a497bbac63b5dc1acdfbe0e5e3d7ebe10ae33d50622a6af9b5cb5fbb52fe8a6bf2b817c151d515f2a69e5d4032e8f90e2f2a5dda04dd8d0395b6592f1a1bf76bb7865f59cf55106c9a1afb0812fbd02e036e4c1016335b1d4e100e7899f7c05fcac58cc5d25f545d174c9a2190de8575ead6958059f919665c91264d46da108f9f2182fe413981dc1136ebebf54bc2969b1c38358e444ea") 17:19:30 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\xff\xa4\f\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbd\xa3\xb3\xe3\x12y\"\x8dJ\x13\x0f]\x92\xbeL\rb\xf3\xb1\x06\xa4\x97\xd5\x16\x11\t\x96U\xe5\xa1S>\xa6\xf4\x103\xf0C\xbb\xcc\xa2\x1d\x80\xe6|\x1e\xc63hD\x9f\x0e\v6?Z\xeb\xc9\xdf\\F\xdf}s\xb6\x01,\xb8\t\xb0$@7|\xd4\x1d\xbf4\x10\x0f\x81M\xe0\x9b\xa4\xe2\xf7/\xad\x81T\xa8|\v\ff\xa2w\xde\x8cf', 0x3) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000080)='\xbf4\xa3\xb7\x99Y\xfb\xce\x98\xc1\x83\xf5\x89juz\xd9\xb6\xca\x99\xdb\xd4\v\x1b\"\xb4\xd8\xff\xa4\f}\xaa\xddP8\x81\xec\xc8\x80wP\xc9b\xa3\x8f\xe1\xedfA\xf3G\xea\xac\x8c\xed\xdd \xe8m\x11\xe4\xe5\xc7\xa4\xc5\nv\xbb\xa3\xb3\x0f\x12y\"\x8dJ\x06\xa4\x97\xd5\x16\x11\t\xb0w\x8d\x178\r\x17\x9f0\xa7', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) fallocate(r3, 0x2, 0x8, 0xc6a7) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="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"/4211, @ANYRES64=r0, @ANYRES64=0x0], 0x0) 17:19:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, 0x0, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:19:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x0, 0x0, 0x85, 0x0, 0xffffffff, 0x12008, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5775, 0x1, @perf_config_ext={0x3, 0xf80a}, 0x40001, 0x4a3, 0x9fe, 0x5, 0x6, 0x1, 0x9, 0x0, 0x4, 0x0, 0xf9}, r3, 0x2, r5, 0x0) r6 = dup2(r1, r2) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000140)='\x00', 0x0, r0) 17:19:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:19:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x403, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40000c5) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x150, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x150}, 0x1, 0x0, 0x0, 0x48000}, 0x8) 17:19:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33373631313835303700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c7b2a4502ed64a6eb421652eb677bbba010040000c00000000000000d6f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003800000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010500)="ff010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d6f4655fd6f4655fd6f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000030000000", 0x40, 0x1800}, {&(0x7f0000010f00)="20000000681d5748681d574800000000d6f4655f00"/32, 0x20, 0x1880}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000500000000200000004000000520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1c00}, {&(0x7f0000011100)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000600000000200000004000000620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x2000}, {&(0x7f0000011200)="c0410000002c0000d6f4655fd6f4655fd6f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000040000000", 0x40, 0x3c00}, {&(0x7f0000011300)="20000000000000000000000000000000d6f4655f000000000000000000000000000002ea00"/64, 0x40, 0x3c80}, {&(0x7f0000011400)="ed4100003c000000d7f4655fd7f4655fd7f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000097bbe33d00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011500)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000070000000000000000000000000000000000000000000000000000000000000000000000000000000ba8b7ff700000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4400}, {&(0x7f0000011600)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3337363131383530372f66696c65302f66696c6530000000000000000000000000000000000000000000008cbe886300000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4800}, {&(0x7f0000011700)="ed8100000a000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d33368e00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x4c00}, {&(0x7f0000011800)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800010000000af30100040000000000000000000000090000008000000000000000000000000000000000000000000000000000000000000000000000000000000072b2bc0c00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xc0, 0x4fe0}, {&(0x7f0000011900)="ed81000064000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0ac393e100000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x5400}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x57c0}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0xc000}, {&(0x7f0000011c00)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x10000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x10400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x10800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x10c00}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x11000}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x11400}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x11800}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x11c00}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0x12000}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0x12400}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0x12800}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x14000}, {&(0x7f0000012800)="0200"/32, 0x20, 0x14400}, {&(0x7f0000012900)="0300"/32, 0x20, 0x14800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0x14c00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0x15000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x15400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x19400}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1c000}], 0x0, &(0x7f0000013800)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000020, &(0x7f0000000640)={'trans=xen,', {[{@cache_none}, {@privport}, {@access_any}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, '\''}}, {@fowner_eq={'fowner', 0x3d, r0}}]}}) 17:19:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xa, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'bridge0\x00', {0x3}, 0x3}) [ 469.889338] Module has invalid ELF structures 17:19:30 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:19:30 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') [ 469.920097] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 469.922707] EXT4-fs (loop3): Unrecognized mount option "trans=xen" or missing value [ 469.954313] EXT4-fs (loop3): Unrecognized mount option "trans=xen" or missing value [ 469.955052] Module has invalid ELF structures 17:19:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080", 0x59, 0x400}], 0x0, &(0x7f0000013800)) 17:19:31 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) [ 470.014582] Module has invalid ELF structures [ 470.021556] Module has invalid ELF structures 17:19:31 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:19:31 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:19:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) [ 470.095905] Module has invalid ELF structures [ 470.127605] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 470.128652] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (2 blocks) 17:19:31 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:19:31 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:19:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r5, 0x4, 0x2800) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x0, 0x0, 0x85, 0x0, 0xffffffff, 0x12008, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5775, 0x1, @perf_config_ext={0x3, 0xf80a}, 0x40001, 0x4a3, 0x9fe, 0x5, 0x6, 0x1, 0x9, 0x0, 0x4, 0x0, 0xf9}, r3, 0x2, r5, 0x0) r6 = dup2(r1, r2) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000140)='\x00', 0x0, r0) [ 470.188708] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 470.190407] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (2 blocks) [ 470.222499] Module has invalid ELF structures [ 470.234292] Module has invalid ELF structures [ 470.310685] Module has invalid ELF structures [ 482.920903] kmemleak: 30 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:19:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:19:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:19:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:19:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, 0x0, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:19:51 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb1de75d56ffffffffffff08004501ffffffff1400907800"/42], 0x0) syz_emit_ethernet(0x7d, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x1b, "be2b87df08be697001313615a08c244744daa7376faf24b26380d34d443dc70525a2c80438f0de8422abb841e50d2311c705941201ff9ec77dc38416c90b87812ee527011c315f7133558d8937e6aa8ae80ed65dee119cdbd4af0bbadab475a60aa06737c92ab34569d8017801c780"}}}, &(0x7f00000000c0)={0x1, 0x1, [0xe02, 0xcda, 0xfb6, 0x4a9]}) syz_emit_ethernet(0x3cd, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000030000000000009100470081003e00884800000000000000000000030000000100446303a700680000002f9078ffffffff640101020713ade00000027f000001ac1414bb0000000086260000000307089a5e22ea610e030b1b8117a50e6371ae170004cc8c0009d3d1557c0ca01a0000000c20880b00d60000ae2460d6e1cdb9d53036048adde7f79e64d5f1f9a263df4325ff6e41d8c824acee0b12423aa4b2cf0aaa069612a9ba4b33b22738c68678170f6999443457297d0ce4969e30d936acbb030b39b78015dac1f0b184d4248a7000f36e86aa3c9824ab15040930a71fcfe87548ce41085c76ef02d0bc4b232519c1f20d45d13b3c87e83dfba8e4f4210aac019bb25c606663922791ac3b4aeac06624417ac20fc0606245664570fafb6be776d6e0fc63071dd0981c7c17de3df011abc9ce8575afc5bc5b0bc344b62cc8b47e655000c86676006cc5a9dc2b09000800ffff000800005145d87f43070eac52d38b0dc246bc3f19e78d4d8e2570b4a2a2a12bfac506143ac4f28f808e876adc3563cc88dd3203e13b57e8e3d0a473eae912b651627b57bd153dea71b3b8ffa2183ac5602bfacffae4d8efcf0ffbad6eb3e2890aa4f507ddf8a46c4e13408dff116cd27df764d257ba7e01c2af72ff6f9697624fa31a1dcbe56a4b73837925ba9434e400132189bbf85d2d3f654cb629e561b510870e57245780f270069f1be67982cde4a527bc61cae0020e249e54138e7d0340166b28dea1b6ebb013b9231ed134a747a0c297fdb94c4a1f9886147bf1f3afc6eea8c59bfca7513ad93948ab142330864bd56b5af4c45ea314f13a41a37559390723e2c4636686ac39050086dd0006518c0b366e7bd6291a292604a73c01c4165bd45e6b9735ae77fa8565f78750e5e42dec96759052e6851fe06dc9bdb59e715789b7ee90e693677e53d39327881a1529cc18a24454fdac331788df673ce55fb8c955ddbfc65e417f494518ddf96371e1cc55cbfa1d5d45e7afe141485ebb0f3eaf2c6005891c1b7e2e80bbcd3eee2f34c549c2817fd5454fcfe6fb5e3c8a331c6bb284aa5b0490612ac79a816018e8e68e059862a18eb0165f97654bf384d5bfce282701dcc7178838e0cbfa54a7958889e4373c16d4e0b09bd3e1cde38dc1c1080088be0000000414f0dd0101000000ffffffff080022eb0000000220000103020000000000000810005e030800655800000004cc0319d04e46ecc9e9267a7baa8141a3e5ae9023e2002de95b9aca54ffaf168a966c429ef0fbd0d47dd098f5939f192904c02d9a714ee541fc3e99dee7472f282349aa2916aa17d1ee2ad90654dd104cb8e6bf1664633d2316ce2dfcae4228efdc990d924d5030ba60b3bf83bc2e71634c0bae46602516e6648696130a9fa8e0bf82dffc10d3cbe638d4c23a7cd85e299d50b34c195975586b0f6281c92cbb0c62b857dc8e8ed47091f1eb3034ea4b98ca9c8c9e252bddbc8a17b7b84442ac36676890dbb313069fd761d559ab0d49228ff62c44a9927fc5389b4e7ec641712ee1"], &(0x7f0000000500)={0x0, 0x1, [0xe37, 0xb4c, 0x9f3, 0xdde]}) syz_emit_ethernet(0x10fe, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0) 17:19:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000040000, 0x4, &(0x7f0000000cc0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0f0000000000ea0000000000000000", 0xf, 0x800}, {&(0x7f00000002c0)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff994795ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffb8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff75c336d101edfb39ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x5d0, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}, {&(0x7f0000000140)="f54fabef8a7ec4b8829b3ed82e9121161a21a1d089a28313c8c1187053850810ae705ef3d95427b00189763469f261caac8d96265adb82c48657edd3ba2c1b42ab34", 0x0, 0x6}, {&(0x7f0000000b00)="05a7108ce971d09fa2e5e0a5c6cdcb00fc21edcec466ba7d36f84597b513f463ce6a98fa85a2dec5e194dac15cfbbb74e43a3afd3e80a3bd2b101ae105bb7fb12c15ec92922e", 0x0, 0x2}, {&(0x7f00000000c0), 0x0, 0xe3a6}, {&(0x7f0000000b80)="86964790d4414318d1da7c248cad78e451f8f7c882c6aef2dc04cf4c5a5fba80322129d79a5fcaf7d51025124ede49d868d768642d18d01c3c457da4925a82867ac7670e013d104e7f343c0c6038", 0x0, 0x2b2}, {&(0x7f0000000c00)="f2415a0f20df4b0c612b5934e817ec05b4d7c5b6fbbaf3e412d0916ca845f720c73b4de465d07c01e300fd16691ff7cac9edd17904aa49482b447cb30d6436314e6a11d94be991782de23fa365e8e966fe35793928fbbb9f94bc1e4000d1a3e806e7dcc8c7858b16467f6514d71a92233a8165301f7b9584af7afed6b3ad45ec110a34889b103cc94d355b484d1c0f616f1996a4b81eaa"}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)=ANY=[], 0x10) creat(&(0x7f0000000280)='./file1\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x301000, 0x1) 17:19:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') 17:19:51 executing program 2: mlockall(0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee00, 0xee01) mlockall(0x6) io_setup(0x2, &(0x7f0000000040)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r0, r1, r2) [ 490.609677] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 15335424)! [ 490.610975] EXT4-fs (loop4): group descriptors corrupted! [ 490.646723] EXT4-fs (loop4): Unrecognized mount option "./file0" or missing value 17:19:51 executing program 4: r0 = clone3(&(0x7f0000000040)={0x0, &(0x7f0000000600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgid(r0) r2 = syz_open_dev$mouse(&(0x7f0000000300), 0x81, 0x100) clone3(&(0x7f0000000340)={0x14000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x12}, &(0x7f0000000180)=""/255, 0xff, &(0x7f0000000280)=""/37, &(0x7f00000002c0)=[r1], 0x1, {r2}}, 0x58) syz_open_dev$mouse(&(0x7f0000000000), 0x200, 0x220c80) 17:19:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCSWINSZ(r0, 0x4b49, &(0x7f0000000000)={0x6, 0x0, 0x81, 0x5}) 17:19:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) [ 490.801143] Module has invalid ELF structures 17:19:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0/file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r1, &(0x7f0000000080)='*', 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd, 0xf5ffffff}) [ 490.806782] Module has invalid ELF structures [ 490.807940] Module has invalid ELF structures 17:19:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:19:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:19:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') 17:19:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0], 0xb8}}, 0x0) [ 490.991374] Module has invalid ELF structures 17:19:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, 0x0, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 491.066963] Module has invalid ELF structures [ 491.099670] Module has invalid ELF structures [ 501.766206] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:20:11 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, 0x0, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:20:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x1e, 0xe21, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x104, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40) 17:20:11 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:11 executing program 1: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) fdatasync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) fadvise64(r1, 0x0, 0xfffffffffffffffb, 0x4) pwrite64(r2, &(0x7f0000000300)='\a', 0x1, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000001340)=""/150) 17:20:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000"], 0xb8}}, 0x0) 17:20:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:20:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200201000000000", @ANYRES32=0x0], 0xb8}}, 0x0) [ 510.229497] Module has invalid ELF structures 17:20:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) 17:20:11 executing program 4: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) r4 = syz_io_uring_setup(0x4009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, r7+60000000}}, 0x0) setresuid(0x0, 0x0, 0x0) r8 = syz_io_uring_complete(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x178, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x805) io_uring_enter(r4, 0x76d3, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 510.294254] Module has invalid ELF structures [ 510.303762] Module has invalid ELF structures 17:20:11 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:20:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:20:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:20:11 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 510.378316] Module has invalid ELF structures [ 510.381230] Module has invalid ELF structures 17:20:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:20:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, 0x0, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:20:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) [ 510.441684] Module has invalid ELF structures [ 510.450811] Module has invalid ELF structures [ 510.452291] Module has invalid ELF structures [ 510.488981] Module has invalid ELF structures [ 510.493066] Module has invalid ELF structures [ 523.254447] kmemleak: 25 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:20:30 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:30 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() fork() r7 = fork() r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:20:30 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:30 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2805ebc2dcb1c302, 0x1a0) 17:20:30 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:20:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) 17:20:30 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:20:30 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 529.932275] Module has invalid ELF structures [ 529.985216] Module has invalid ELF structures [ 530.020733] Module has invalid ELF structures [ 530.072344] Module has invalid ELF structures [ 530.078079] Module has invalid ELF structures [ 541.982040] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:20:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() fork() r7 = fork() r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:20:51 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 17:20:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:20:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) [ 550.021064] Module has invalid ELF structures 17:20:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) [ 550.121703] Module has invalid ELF structures 17:20:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 550.148501] Module has invalid ELF structures [ 550.150882] Module has invalid ELF structures [ 550.156633] Module has invalid ELF structures 17:20:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffeffffffff, 0x7ff}) 17:20:51 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 550.202316] Module has invalid ELF structures 17:20:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() fork() r7 = fork() r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000"], 0xb8}}, 0x0) 17:20:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:20:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 550.293919] Module has invalid ELF structures [ 550.341642] Module has invalid ELF structures [ 550.347102] Module has invalid ELF structures [ 550.364305] Module has invalid ELF structures [ 550.365135] Module has invalid ELF structures [ 563.034787] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:21:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000"], 0xb8}}, 0x0) 17:21:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(r7, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, 0x0, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:21:12 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000"], 0xb8}}, 0x0) [ 571.862063] Module has invalid ELF structures [ 571.863222] Module has invalid ELF structures [ 571.865702] Module has invalid ELF structures 17:21:12 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:12 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 571.909620] Module has invalid ELF structures [ 571.911843] Module has invalid ELF structures 17:21:13 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:13 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 571.967960] Module has invalid ELF structures 17:21:13 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(r7, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, 0x0, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:21:13 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:13 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/48], 0xb8}}, 0x0) [ 572.054713] Module has invalid ELF structures 17:21:13 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:13 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 572.079224] Module has invalid ELF structures 17:21:13 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 572.133282] Module has invalid ELF structures 17:21:13 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 572.146854] Module has invalid ELF structures 17:21:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/48], 0xb8}}, 0x0) [ 572.183039] Module has invalid ELF structures [ 572.204438] Module has invalid ELF structures [ 572.249792] Module has invalid ELF structures [ 583.823439] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:21:33 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(r7, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, 0x0, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:21:33 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:21:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/48], 0xb8}}, 0x0) 17:21:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 592.163396] Module has invalid ELF structures [ 592.169163] Module has invalid ELF structures 17:21:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 592.216517] Module has invalid ELF structures 17:21:33 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:21:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) [ 592.291860] Module has invalid ELF structures 17:21:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 592.315039] Module has invalid ELF structures 17:21:33 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:33 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 592.362417] Module has invalid ELF structures [ 592.369033] Module has invalid ELF structures [ 592.390671] cgroup: fork rejected by pids controller in /syz1 [ 592.528173] Module has invalid ELF structures [ 592.533776] Module has invalid ELF structures [ 606.236586] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:21:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:21:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(0x0, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:21:55 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 6: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) [ 614.036702] cgroup: fork rejected by pids controller in /syz3 17:21:55 executing program 6: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) [ 614.119092] Module has invalid ELF structures 17:21:55 executing program 6: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:21:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:21:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e24000002002010"], 0xb8}}, 0x0) 17:21:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 614.182329] Module has invalid ELF structures [ 614.189766] cgroup: fork rejected by pids controller in /syz6 [ 614.221543] Module has invalid ELF structures [ 614.244847] Module has invalid ELF structures 17:22:07 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:22:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) 17:22:07 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(0x0, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:22:07 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 626.349377] Module has invalid ELF structures [ 626.355442] Module has invalid ELF structures 17:22:07 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 3: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) [ 626.456273] Module has invalid ELF structures [ 626.499703] Module has invalid ELF structures [ 626.544599] Module has invalid ELF structures [ 626.547289] Module has invalid ELF structures [ 640.480471] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:22:30 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() kcmp(0x0, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:22:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) 17:22:30 executing program 3: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 649.576466] Module has invalid ELF structures [ 649.602257] Module has invalid ELF structures [ 649.603829] Module has invalid ELF structures 17:22:30 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:22:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) [ 649.693230] Module has invalid ELF structures [ 649.720805] Module has invalid ELF structures [ 662.453927] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:22:51 executing program 3: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, 0x0, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:22:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:22:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:22:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:22:51 executing program 5: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 670.363093] Module has invalid ELF structures 17:22:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 670.382555] Module has invalid ELF structures 17:22:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 670.397948] Module has invalid ELF structures 17:22:51 executing program 5: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:22:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 670.444703] Module has invalid ELF structures 17:22:51 executing program 5: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, 0x0, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:22:51 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:22:51 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 670.560424] Module has invalid ELF structures [ 670.562529] Module has invalid ELF structures 17:22:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 670.602248] Module has invalid ELF structures 17:22:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:22:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 670.644838] Module has invalid ELF structures [ 670.646511] Module has invalid ELF structures [ 670.717467] Module has invalid ELF structures [ 682.905115] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:23:12 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:23:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:23:12 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, 0x0, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:23:12 executing program 2: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 691.053917] Module has invalid ELF structures 17:23:12 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 2: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) [ 691.111996] Module has invalid ELF structures [ 691.126204] Module has invalid ELF structures [ 691.129019] Module has invalid ELF structures [ 691.195482] Module has invalid ELF structures [ 704.196141] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:23:38 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:38 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:23:38 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:38 executing program 2: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) fork() r4 = fork() r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:23:38 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:23:38 executing program 7: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 717.535912] Module has invalid ELF structures 17:23:38 executing program 7: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 717.612161] Module has invalid ELF structures [ 717.615404] Module has invalid ELF structures [ 717.641525] Module has invalid ELF structures [ 731.023840] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:24:00 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) fork() r4 = fork() r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:24:00 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:24:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 739.625624] Module has invalid ELF structures 17:24:00 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:00 executing program 4: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 739.715238] Module has invalid ELF structures [ 739.764155] Module has invalid ELF structures 17:24:14 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) fork() r4 = fork() r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:14 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:14 executing program 4: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 753.643768] Module has invalid ELF structures [ 753.645860] Module has invalid ELF structures 17:24:14 executing program 4: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:14 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() kcmp(0x0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:27 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:27 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 766.871000] Module has invalid ELF structures 17:24:27 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:27 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:28 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 766.931565] Module has invalid ELF structures 17:24:28 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:28 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:28 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:28 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 767.029818] Module has invalid ELF structures 17:24:28 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 767.102515] Module has invalid ELF structures 17:24:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() kcmp(0x0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:24:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:40 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:41 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:41 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:41 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() kcmp(0x0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:24:54 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:24:54 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:54 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 793.757966] Module has invalid ELF structures 17:24:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 793.874185] Module has invalid ELF structures 17:24:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:24:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:55 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:55 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:24:55 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:24:55 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 793.986733] Module has invalid ELF structures [ 794.194911] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value [ 806.474424] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:25:15 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:25:15 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:25:15 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 814.489740] Module has invalid ELF structures [ 814.498789] Module has invalid ELF structures 17:25:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:15 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 814.636980] Module has invalid ELF structures [ 814.646227] Module has invalid ELF structures [ 828.379015] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:25:38 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:25:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:25:38 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 837.282932] Module has invalid ELF structures 17:25:38 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(0x0, 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 837.325768] Module has invalid ELF structures 17:25:38 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:25:38 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:38 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 837.489469] Module has invalid ELF structures 17:25:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 837.505942] Module has invalid ELF structures [ 837.585483] Module has invalid ELF structures [ 850.183468] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:25:58 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:25:58 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(0x0, 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:25:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 857.860733] Module has invalid ELF structures 17:25:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 857.914931] Module has invalid ELF structures 17:25:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 857.927203] Module has invalid ELF structures [ 857.932708] Module has invalid ELF structures [ 857.937720] Module has invalid ELF structures 17:25:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:25:59 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 857.974641] Module has invalid ELF structures 17:25:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 858.009255] Module has invalid ELF structures 17:25:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:25:59 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:25:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 858.037848] Module has invalid ELF structures 17:25:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 858.090773] Module has invalid ELF structures [ 858.133056] Module has invalid ELF structures [ 869.371273] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:26:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, 0x0, r7, r8, r9, 0x0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, r0, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:26:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:26:18 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:18 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:18 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:18 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(0x0, 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:26:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:26:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:26:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 877.035118] cgroup: fork rejected by pids controller in /syz5 [ 877.037147] Module has invalid ELF structures [ 877.040399] Module has invalid ELF structures [ 877.050401] Module has invalid ELF structures [ 877.066201] Module has invalid ELF structures 17:26:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:26:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:26:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, 0x0, r7, r8, r9, 0x0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, r0, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:26:18 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 877.177663] Module has invalid ELF structures [ 891.821030] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:26:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, 0x0, r7, r8, r9, 0x0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, r0, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:26:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:26:40 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:40 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 899.883907] Module has invalid ELF structures 17:26:40 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) [ 899.996190] Module has invalid ELF structures [ 900.006653] Module has invalid ELF structures [ 900.022706] Module has invalid ELF structures [ 900.036502] Module has invalid ELF structures [ 900.047515] Module has invalid ELF structures 17:26:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) 17:26:41 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 900.282386] Module has invalid ELF structures [ 900.314553] Module has invalid ELF structures 17:26:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:54 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:26:54 executing program 0: r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, 0xffffffffffffffff, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:26:54 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:26:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:26:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) 17:26:54 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 913.567790] Module has invalid ELF structures [ 913.590793] Module has invalid ELF structures [ 913.594628] Module has invalid ELF structures [ 913.598282] Module has invalid ELF structures [ 913.665855] Module has invalid ELF structures [ 926.874240] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:27:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:27:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:16 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 0: r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, 0xffffffffffffffff, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:27:16 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 935.355360] Module has invalid ELF structures [ 935.360708] Module has invalid ELF structures [ 935.362160] Module has invalid ELF structures 17:27:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:27:16 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 935.516179] Module has invalid ELF structures [ 935.521049] Module has invalid ELF structures [ 935.525444] Module has invalid ELF structures [ 935.547835] Module has invalid ELF structures 17:27:16 executing program 0: r0 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r3 = fork() r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r0, r7, r8, r9, r0], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r2, 0xffffffffffffffff, 0x80000001}) r13 = dup3(r12, r1, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 935.611789] Module has invalid ELF structures 17:27:16 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:16 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:27:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 935.797115] Module has invalid ELF structures 17:27:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 935.845199] Module has invalid ELF structures 17:27:16 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 935.879235] Module has invalid ELF structures 17:27:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000"], 0xb8}}, 0x0) 17:27:17 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:17 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 936.015377] Module has invalid ELF structures [ 936.021227] Module has invalid ELF structures [ 936.190847] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value [ 948.767804] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:27:37 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:27:37 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000"], 0xb8}}, 0x0) 17:27:37 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000"], 0xb8}}, 0x0) 17:27:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/45], 0xb8}}, 0x0) [ 956.552033] Module has invalid ELF structures [ 956.564560] Module has invalid ELF structures 17:27:37 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/45], 0xb8}}, 0x0) 17:27:37 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:37 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 956.695428] Module has invalid ELF structures [ 956.699790] Module has invalid ELF structures [ 956.807083] Module has invalid ELF structures [ 967.994402] kmemleak: 34 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:27:56 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:27:56 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:56 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:56 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:56 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/45], 0xb8}}, 0x0) 17:27:56 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:27:57 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:27:57 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 976.073956] Module has invalid ELF structures [ 976.132313] Module has invalid ELF structures [ 988.710024] kmemleak: 23 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:28:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:28:18 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/52], 0xb8}}, 0x0) 17:28:18 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, 0x0, 0x0) 17:28:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 997.535184] Module has invalid ELF structures 17:28:18 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(0x0, 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 997.613291] Module has invalid ELF structures 17:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/52], 0xb8}}, 0x0) 17:28:18 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 997.702104] Module has invalid ELF structures 17:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000000000200100"/52], 0xb8}}, 0x0) 17:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 997.798281] Module has invalid ELF structures [ 997.804211] Module has invalid ELF structures 17:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 997.860258] Module has invalid ELF structures [ 997.867246] Module has invalid ELF structures 17:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) 17:28:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 997.925595] Module has invalid ELF structures 17:28:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:19 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) 17:28:19 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:28:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:19 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 998.084928] Module has invalid ELF structures [ 998.103356] Module has invalid ELF structures [ 998.166681] Module has invalid ELF structures [ 998.276643] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value [ 1010.362148] kmemleak: 39 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:28:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) fork() r4 = fork() r5 = gettid() r6 = fork() r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fork() r9 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r4, r5, r1, r7, r8, r9, r1], 0x7, {r10}}, 0x58) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r12, &(0x7f0000000800)={r3, r0, 0x80000001}) r13 = dup3(r12, r2, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:28:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:28:39 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:39 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000"], 0xb8}}, 0x0) 17:28:39 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:39 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:39 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1018.942193] Module has invalid ELF structures 17:28:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:28:40 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:28:40 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1019.071298] Module has invalid ELF structures 17:28:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1019.109477] Module has invalid ELF structures [ 1019.180604] Module has invalid ELF structures [ 1019.187175] Module has invalid ELF structures [ 1019.211223] Module has invalid ELF structures [ 1031.384906] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:29:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:29:00 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:00 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:00 executing program 2: r0 = memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:00 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:29:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) [ 1039.426530] cgroup: fork rejected by pids controller in /syz4 [ 1039.529232] Module has invalid ELF structures [ 1039.533804] Module has invalid ELF structures [ 1039.539878] Module has invalid ELF structures [ 1051.832204] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:29:21 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:29:21 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:29:21 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1060.337964] Module has invalid ELF structures [ 1060.340823] Module has invalid ELF structures 17:29:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:29:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) [ 1060.401535] Module has invalid ELF structures [ 1060.405312] Module has invalid ELF structures [ 1060.414965] Module has invalid ELF structures [ 1060.419503] Module has invalid ELF structures 17:29:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:29:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:29:21 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:21 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1060.703441] Module has invalid ELF structures 17:29:21 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1060.759446] Module has invalid ELF structures [ 1060.815103] Module has invalid ELF structures [ 1060.815638] Module has invalid ELF structures [ 1060.847914] Module has invalid ELF structures [ 1060.864960] Module has invalid ELF structures [ 1073.211003] kmemleak: 54 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:29:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:29:43 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:29:43 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:29:43 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1082.186276] Module has invalid ELF structures 17:29:43 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) [ 1082.219101] Module has invalid ELF structures 17:29:43 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1082.271692] Module has invalid ELF structures 17:29:43 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 1082.290975] Module has invalid ELF structures [ 1082.301944] Module has invalid ELF structures 17:29:43 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1082.422072] Module has invalid ELF structures [ 1082.459269] Module has invalid ELF structures [ 1095.788122] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:30:04 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:30:04 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:04 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:04 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) [ 1103.891526] Module has invalid ELF structures [ 1103.895909] Module has invalid ELF structures 17:30:04 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1103.925580] Module has invalid ELF structures [ 1103.956531] Module has invalid ELF structures [ 1103.962078] Module has invalid ELF structures 17:30:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:30:05 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:30:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:05 executing program 6 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) [ 1104.153478] Module has invalid ELF structures 17:30:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:05 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:05 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:05 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1104.255684] FAULT_INJECTION: forcing a failure. [ 1104.255684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1104.258436] CPU: 0 PID: 14449 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1104.259924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1104.262433] Call Trace: [ 1104.263019] dump_stack+0x107/0x163 [ 1104.263823] should_fail.cold+0x5/0xa [ 1104.264666] _copy_from_user+0x2e/0x1b0 [ 1104.265553] __copy_msghdr_from_user+0x95/0x530 [ 1104.266578] ? __ia32_sys_shutdown+0x70/0x70 [ 1104.267537] ? perf_trace_lock+0xb6/0x470 [ 1104.268453] ? hlock_class+0x120/0x120 [ 1104.269306] ? __lock_acquire+0xc08/0x5b60 [ 1104.270239] sendmsg_copy_msghdr+0xa1/0x160 [ 1104.271195] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1104.272187] ? perf_trace_lock+0xb6/0x470 [ 1104.273092] ? hlock_class+0x120/0x120 [ 1104.273960] ___sys_sendmsg+0xcf/0x170 [ 1104.274804] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.275798] ? __fget_files+0x228/0x410 [ 1104.276683] ? lock_downgrade+0x6d0/0x6d0 [ 1104.277607] ? __fget_files+0x251/0x410 [ 1104.278495] ? __fget_light+0xea/0x280 [ 1104.279335] ? sockfd_lookup_light+0xc6/0x180 [ 1104.280301] __sys_sendmsg+0xe9/0x1b0 [ 1104.281144] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1104.282111] ? rcu_read_lock_any_held+0x69/0x90 [ 1104.283155] ? fput_many+0x2f/0x1a0 [ 1104.283921] ? ksys_write+0x1a5/0x250 [ 1104.284708] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1104.285800] do_syscall_64+0x33/0x40 [ 1104.286617] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.287737] RIP: 0033:0x466609 [ 1104.288441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.292526] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.294209] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1104.295770] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1104.297334] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.298892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.300450] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:30:05 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:30:05 executing program 2 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1104.442636] Module has invalid ELF structures [ 1104.476112] Module has invalid ELF structures [ 1104.501818] Module has invalid ELF structures [ 1104.514555] FAULT_INJECTION: forcing a failure. [ 1104.514555] name failslab, interval 1, probability 0, space 0, times 1 [ 1104.517056] CPU: 1 PID: 14663 Comm: syz-executor.2 Not tainted 5.10.60 #1 [ 1104.518515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1104.520967] Call Trace: [ 1104.521555] dump_stack+0x107/0x163 [ 1104.522328] should_fail.cold+0x5/0xa [ 1104.523152] ? __get_vm_area_node+0xd4/0x340 [ 1104.524101] should_failslab+0x5/0x10 [ 1104.524922] kmem_cache_alloc_node_trace+0x59/0x370 [ 1104.526016] __get_vm_area_node+0xd4/0x340 [ 1104.526928] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 1104.527937] __vmalloc_node_range+0x13f/0x9e0 [ 1104.528904] ? kernel_read_file+0x6b4/0x790 [ 1104.529850] ? kernel_read_file+0x6b4/0x790 [ 1104.530783] ? selinux_kernel_read_file+0x8c/0x400 [ 1104.531836] ? __vmalloc_node+0x100/0x100 [ 1104.532742] ? kernel_read_file+0x6b4/0x790 [ 1104.533679] __vmalloc_node+0xb5/0x100 [ 1104.534517] ? kernel_read_file+0x6b4/0x790 [ 1104.535450] kernel_read_file+0x6b4/0x790 [ 1104.536351] ? __x64_sys_fspick+0x420/0x420 [ 1104.537293] ? __fsnotify_parent+0x532/0xae0 [ 1104.538236] ? cap_capable+0x1e1/0x250 [ 1104.539086] kernel_read_file_from_fd+0x62/0xb0 [ 1104.540096] __do_sys_finit_module+0xe8/0x180 [ 1104.541062] ? __ia32_sys_init_module+0xa0/0xa0 [ 1104.542107] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1104.543149] do_syscall_64+0x33/0x40 [ 1104.543948] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.545049] RIP: 0033:0x466609 [ 1104.545746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.549723] RSP: 002b:00007fac4d0bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1104.551336] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1104.552901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1104.554551] RBP: 00007fac4d0bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.556172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.557813] R13: 00007fff8032f30f R14: 00007fac4d0bf300 R15: 0000000000022000 [ 1104.559743] syz-executor.2: vmalloc: allocation failure: 4194305 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1104.562797] CPU: 1 PID: 14663 Comm: syz-executor.2 Not tainted 5.10.60 #1 [ 1104.564334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1104.566908] Call Trace: [ 1104.567507] dump_stack+0x107/0x163 [ 1104.568349] warn_alloc.cold+0x87/0x18d [ 1104.569313] ? zone_watermark_ok_safe+0x260/0x260 [ 1104.570350] ? __kasan_kmalloc.constprop.0+0x9e/0xd0 [ 1104.571425] ? __get_vm_area_node+0x262/0x340 [ 1104.572378] __vmalloc_node_range+0x58e/0x9e0 [ 1104.573337] ? kernel_read_file+0x6b4/0x790 [ 1104.574255] ? selinux_kernel_read_file+0x8c/0x400 [ 1104.575311] ? __vmalloc_node+0x100/0x100 [ 1104.576197] ? kernel_read_file+0x6b4/0x790 [ 1104.577107] __vmalloc_node+0xb5/0x100 [ 1104.577937] ? kernel_read_file+0x6b4/0x790 [ 1104.578857] kernel_read_file+0x6b4/0x790 [ 1104.579740] ? __x64_sys_fspick+0x420/0x420 [ 1104.580653] ? __fsnotify_parent+0x532/0xae0 [ 1104.581600] ? cap_capable+0x1e1/0x250 [ 1104.582434] kernel_read_file_from_fd+0x62/0xb0 [ 1104.583425] __do_sys_finit_module+0xe8/0x180 [ 1104.584371] ? __ia32_sys_init_module+0xa0/0xa0 [ 1104.585400] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1104.586424] do_syscall_64+0x33/0x40 [ 1104.587215] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.588298] RIP: 0033:0x466609 [ 1104.588983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.592870] RSP: 002b:00007fac4d0bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1104.594495] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1104.596002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1104.597522] RBP: 00007fac4d0bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.599025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.600531] R13: 00007fff8032f30f R14: 00007fac4d0bf300 R15: 0000000000022000 [ 1104.602178] Mem-Info: [ 1104.602751] active_anon:151 inactive_anon:137569 isolated_anon:0 [ 1104.602751] active_file:14517 inactive_file:46665 isolated_file:0 [ 1104.602751] unevictable:0 dirty:141 writeback:0 [ 1104.602751] slab_reclaimable:8638 slab_unreclaimable:66944 [ 1104.602751] mapped:80889 shmem:94332 pagetables:7078 bounce:0 [ 1104.602751] free:58300 free_pcp:753 free_cma:0 [ 1104.610152] Node 0 active_anon:604kB inactive_anon:549436kB active_file:58068kB inactive_file:186660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:323556kB dirty:564kB writeback:0kB shmem:376572kB writeback_tmp:0kB kernel_stack:10528kB all_unreclaimable? no [ 1104.615463] Node 0 DMA free:15892kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1104.621334] lowmem_reserve[]: 0 1621 1621 1621 [ 1104.622428] Node 0 DMA32 free:219480kB min:5124kB low:6784kB high:8444kB reserved_highatomic:0KB active_anon:604kB inactive_anon:548092kB active_file:58068kB inactive_file:186660kB unevictable:0kB writepending:560kB present:2080640kB managed:1665312kB mlocked:0kB pagetables:28312kB bounce:0kB free_pcp:2888kB local_pcp:1524kB free_cma:0kB [ 1104.628972] lowmem_reserve[]: 0 0 0 0 [ 1104.629899] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15892kB [ 1104.632911] Node 0 DMA32: 481*4kB (UME) 234*8kB (UME) 246*16kB (UME) 74*32kB (UME) 74*64kB (UME) 32*128kB (UME) 18*256kB (UM) 6*512kB (UME) 1*1024kB (E) 2*2048kB (U) 46*4096kB (M) = 220148kB [ 1104.636723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1104.638582] 119530 total pagecache pages [ 1104.639471] 0 pages in swap cache [ 1104.640215] Swap cache stats: add 0, delete 0, find 0/0 [ 1104.641400] Free swap = 0kB [ 1104.642036] Total swap = 0kB [ 1104.642716] 524158 pages RAM [ 1104.643381] 0 pages HighMem/MovableOnly [ 1104.644235] 103853 pages reserved [ 1118.408780] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:30:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r2 = fork() r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = gettid() r5 = fork() r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fork() r8 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r9, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r3, r4, r1, r6, r7, r8, r1], 0x7, {r9}}, 0x58) r11 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r11, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x80000001}) r12 = dup3(r11, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:26 executing program 7: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e2400000200"], 0xb8}}, 0x0) 17:30:26 executing program 6 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:30:26 executing program 3 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:26 executing program 5 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:26 executing program 4 (fault-call:4 fault-nth:0): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1125.623002] FAULT_INJECTION: forcing a failure. [ 1125.623002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.624790] CPU: 0 PID: 14674 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1125.625813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1125.627472] Call Trace: [ 1125.627857] dump_stack+0x107/0x163 [ 1125.628387] should_fail.cold+0x5/0xa [ 1125.628960] _copy_from_user+0x2e/0x1b0 [ 1125.629551] iovec_from_user.part.0+0xa0/0x410 [ 1125.630210] __import_iovec+0xa7/0x5a0 [ 1125.630771] ? __ia32_sys_shutdown+0x70/0x70 [ 1125.631419] import_iovec+0x83/0xb0 [ 1125.631962] sendmsg_copy_msghdr+0x125/0x160 [ 1125.632609] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1125.633293] ? perf_trace_lock+0xb6/0x470 [ 1125.633912] ? hlock_class+0x120/0x120 [ 1125.634492] ___sys_sendmsg+0xcf/0x170 [ 1125.635063] ? sendmsg_copy_msghdr+0x160/0x160 [ 1125.635724] ? __fget_files+0x228/0x410 [ 1125.636293] ? lock_downgrade+0x6d0/0x6d0 [ 1125.636892] ? __fget_files+0x251/0x410 [ 1125.637481] ? __fget_light+0xea/0x280 [ 1125.638038] ? sockfd_lookup_light+0xc6/0x180 [ 1125.638679] __sys_sendmsg+0xe9/0x1b0 [ 1125.639215] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1125.639829] ? rcu_read_lock_any_held+0x69/0x90 [ 1125.640491] ? fput_many+0x2f/0x1a0 [ 1125.641021] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1125.641721] do_syscall_64+0x33/0x40 [ 1125.642248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1125.642968] RIP: 0033:0x466609 [ 1125.643426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.646081] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.647178] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1125.648211] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1125.649196] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.650208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.651218] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 [ 1125.662199] FAULT_INJECTION: forcing a failure. [ 1125.662199] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.663871] CPU: 0 PID: 14675 Comm: syz-executor.3 Not tainted 5.10.60 #1 [ 1125.664845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1125.666475] Call Trace: [ 1125.666854] dump_stack+0x107/0x163 [ 1125.667384] should_fail.cold+0x5/0xa [ 1125.667930] ? __get_vm_area_node+0xd4/0x340 [ 1125.668565] should_failslab+0x5/0x10 [ 1125.669114] kmem_cache_alloc_node_trace+0x59/0x370 [ 1125.669846] __get_vm_area_node+0xd4/0x340 [ 1125.670452] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 1125.671118] __vmalloc_node_range+0x13f/0x9e0 [ 1125.671758] ? kernel_read_file+0x6b4/0x790 [ 1125.672343] ? kernel_read_file+0x6b4/0x790 [ 1125.672965] ? selinux_kernel_read_file+0x8c/0x400 [ 1125.673686] ? __vmalloc_node+0x100/0x100 [ 1125.674281] ? kernel_read_file+0x6b4/0x790 [ 1125.674892] __vmalloc_node+0xb5/0x100 [ 1125.675446] ? kernel_read_file+0x6b4/0x790 [ 1125.676061] kernel_read_file+0x6b4/0x790 [ 1125.676658] ? __x64_sys_fspick+0x420/0x420 [ 1125.677271] ? __fsnotify_parent+0x532/0xae0 [ 1125.677909] ? cap_capable+0x1e1/0x250 [ 1125.678473] kernel_read_file_from_fd+0x62/0xb0 [ 1125.678851] FAULT_INJECTION: forcing a failure. [ 1125.678851] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.679145] __do_sys_finit_module+0xe8/0x180 [ 1125.681048] ? __ia32_sys_init_module+0xa0/0xa0 [ 1125.681756] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1125.682444] do_syscall_64+0x33/0x40 [ 1125.682973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1125.683705] RIP: 0033:0x466609 [ 1125.684163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.686731] RSP: 002b:00007f2606d4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1125.687809] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1125.688820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1125.689853] RBP: 00007f2606d4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.690879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.691892] R13: 00007ffca94a58cf R14: 00007f2606d4e300 R15: 0000000000022000 [ 1125.692935] CPU: 1 PID: 14685 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1125.693036] syz-executor.3: vmalloc: allocation failure: 4194305 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1125.693747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1125.693751] Call Trace: [ 1125.693768] dump_stack+0x107/0x163 [ 1125.693781] should_fail.cold+0x5/0xa [ 1125.695204] ,cpuset= [ 1125.696468] ? __get_vm_area_node+0xd4/0x340 [ 1125.696479] should_failslab+0x5/0x10 [ 1125.696492] kmem_cache_alloc_node_trace+0x59/0x370 [ 1125.696505] __get_vm_area_node+0xd4/0x340 [ 1125.697018] / [ 1125.697443] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 1125.697455] __vmalloc_node_range+0x13f/0x9e0 [ 1125.697473] ? kernel_read_file+0x6b4/0x790 [ 1125.698105] ,mems_allowed=0 [ 1125.698349] ? kernel_read_file+0x6b4/0x790 [ 1125.698362] ? selinux_kernel_read_file+0x8c/0x400 [ 1125.698373] ? __vmalloc_node+0x100/0x100 [ 1125.698983] [ 1125.699416] ? kernel_read_file+0x6b4/0x790 [ 1125.699424] __vmalloc_node+0xb5/0x100 [ 1125.699435] ? kernel_read_file+0x6b4/0x790 [ 1125.706228] kernel_read_file+0x6b4/0x790 [ 1125.706694] ? __x64_sys_fspick+0x420/0x420 [ 1125.707163] ? __fsnotify_parent+0x532/0xae0 [ 1125.707655] ? cap_capable+0x1e1/0x250 [ 1125.708091] kernel_read_file_from_fd+0x62/0xb0 [ 1125.708611] __do_sys_finit_module+0xe8/0x180 [ 1125.709113] ? __ia32_sys_init_module+0xa0/0xa0 [ 1125.709661] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1125.710213] do_syscall_64+0x33/0x40 [ 1125.710630] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1125.711213] RIP: 0033:0x466609 [ 1125.711574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.713635] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1125.714489] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1125.715298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1125.716095] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.716891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.717697] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1125.718518] CPU: 0 PID: 14675 Comm: syz-executor.3 Not tainted 5.10.60 #1 [ 1125.719521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1125.721147] Call Trace: [ 1125.721546] dump_stack+0x107/0x163 [ 1125.722069] warn_alloc.cold+0x87/0x18d [ 1125.722642] ? zone_watermark_ok_safe+0x260/0x260 [ 1125.723344] ? __kasan_kmalloc.constprop.0+0x9e/0xd0 [ 1125.724069] ? __get_vm_area_node+0x262/0x340 [ 1125.724713] __vmalloc_node_range+0x58e/0x9e0 [ 1125.725360] ? kernel_read_file+0x6b4/0x790 [ 1125.726002] ? selinux_kernel_read_file+0x8c/0x400 [ 1125.726701] ? __vmalloc_node+0x100/0x100 [ 1125.727298] ? kernel_read_file+0x6b4/0x790 [ 1125.727915] __vmalloc_node+0xb5/0x100 [ 1125.728469] ? kernel_read_file+0x6b4/0x790 [ 1125.729088] kernel_read_file+0x6b4/0x790 [ 1125.729688] ? __x64_sys_fspick+0x420/0x420 [ 1125.730288] ? __fsnotify_parent+0x532/0xae0 [ 1125.730919] ? cap_capable+0x1e1/0x250 [ 1125.731481] kernel_read_file_from_fd+0x62/0xb0 [ 1125.732153] __do_sys_finit_module+0xe8/0x180 [ 1125.732794] ? __ia32_sys_init_module+0xa0/0xa0 [ 1125.733499] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1125.734217] do_syscall_64+0x33/0x40 [ 1125.734739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1125.735497] RIP: 0033:0x466609 [ 1125.735969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.738618] RSP: 002b:00007f2606d4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1125.739727] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1125.740857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1125.742164] RBP: 00007f2606d4e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.743444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.744605] R13: 00007ffca94a58cf R14: 00007f2606d4e300 R15: 0000000000022000 [ 1125.745726] Mem-Info: [ 1125.746094] active_anon:151 inactive_anon:134557 isolated_anon:0 [ 1125.746094] active_file:14519 inactive_file:46707 isolated_file:0 [ 1125.746094] unevictable:0 dirty:272 writeback:0 [ 1125.746094] slab_reclaimable:8646 slab_unreclaimable:66472 [ 1125.746094] mapped:80861 shmem:91531 pagetables:7147 bounce:0 [ 1125.746094] free:60993 free_pcp:307 free_cma:0 [ 1125.750720] Node 0 active_anon:604kB inactive_anon:538480kB active_file:58076kB inactive_file:186828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:323444kB dirty:1088kB writeback:0kB shmem:366292kB writeback_tmp:0kB kernel_stack:10656kB all_unreclaimable? no [ 1125.754217] Node 0 DMA free:15892kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.757981] lowmem_reserve[]: 0 1621 1621 1621 [ 1125.758692] Node 0 DMA32 free:226796kB min:5124kB low:6784kB high:8444kB reserved_highatomic:0KB active_anon:604kB inactive_anon:539236kB active_file:58076kB inactive_file:186828kB unevictable:0kB writepending:1088kB present:2080640kB managed:1665312kB mlocked:0kB pagetables:28464kB bounce:0kB free_pcp:1492kB local_pcp:1084kB free_cma:0kB [ 1125.762962] lowmem_reserve[]: 0 0 0 0 [ 1125.763576] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15892kB [ 1125.765633] Node 0 DMA32: 42*4kB (E) 28*8kB (UE) 378*16kB (UME) 123*32kB (UME) 143*64kB (UME) 36*128kB (UME) 18*256kB (UM) 7*512kB (UME) 1*1024kB (E) 2*2048kB (U) 46*4096kB (M) = 225864kB [ 1125.768218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1125.769445] 118059 total pagecache pages [ 1125.770049] 0 pages in swap cache [ 1125.770577] Swap cache stats: add 0, delete 0, find 0/0 [ 1125.771357] Free swap = 0kB [ 1125.771794] Total swap = 0kB [ 1125.772206] 524158 pages RAM [ 1125.772669] 0 pages HighMem/MovableOnly [ 1125.773215] 103853 pages reserved 17:30:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 1125.776709] Module has invalid ELF structures 17:30:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x2) [ 1125.813896] cgroup: fork rejected by pids controller in /syz2 17:30:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:26 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1125.885259] Module has invalid ELF structures [ 1125.893862] Module has invalid ELF structures [ 1137.532154] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:30:48 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:30:48 executing program 3 (fault-call:4 fault-nth:1): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:48 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4) 17:30:48 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:48 executing program 5 (fault-call:4 fault-nth:1): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:48 executing program 6 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:30:48 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x2) [ 1147.006265] FAULT_INJECTION: forcing a failure. [ 1147.006265] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.007965] CPU: 0 PID: 15119 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1147.008934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.010540] Call Trace: [ 1147.010910] dump_stack+0x107/0x163 [ 1147.011442] should_fail.cold+0x5/0xa [ 1147.011980] ? __alloc_skb+0x6d/0x620 [ 1147.012537] should_failslab+0x5/0x10 [ 1147.013066] kmem_cache_alloc_node+0x55/0x360 [ 1147.013707] __alloc_skb+0x6d/0x620 [ 1147.014218] netlink_sendmsg+0x951/0xd90 [ 1147.014814] ? netlink_unicast+0x7e0/0x7e0 [ 1147.015444] ? netlink_unicast+0x7e0/0x7e0 [ 1147.016092] sock_sendmsg+0x150/0x190 [ 1147.016654] ____sys_sendmsg+0x701/0x860 [ 1147.017260] ? kernel_sendmsg+0x50/0x50 [ 1147.017835] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1147.018538] ? perf_trace_lock+0xb6/0x470 [ 1147.019115] ? hlock_class+0x120/0x120 [ 1147.019719] ___sys_sendmsg+0xff/0x170 [ 1147.020287] ? sendmsg_copy_msghdr+0x160/0x160 [ 1147.020969] ? __fget_files+0x228/0x410 [ 1147.021550] ? lock_downgrade+0x6d0/0x6d0 [ 1147.022206] ? __fget_files+0x251/0x410 [ 1147.022838] ? __fget_light+0xea/0x280 [ 1147.023454] ? sockfd_lookup_light+0xc6/0x180 [ 1147.024151] __sys_sendmsg+0xe9/0x1b0 [ 1147.024697] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1147.025357] ? rcu_read_lock_any_held+0x69/0x90 [ 1147.026100] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1147.026804] do_syscall_64+0x33/0x40 [ 1147.027372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1147.028112] RIP: 0033:0x466609 [ 1147.028582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.031187] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.032381] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1147.033513] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1147.034578] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.035549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.036467] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:30:48 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0), 0x0, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:48 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 1147.072554] FAULT_INJECTION: forcing a failure. [ 1147.072554] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.073872] CPU: 0 PID: 15131 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1147.074632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.075904] Call Trace: [ 1147.076208] dump_stack+0x107/0x163 [ 1147.076626] should_fail.cold+0x5/0xa [ 1147.077068] ? create_object.isra.0+0x3a/0xa10 [ 1147.077590] should_failslab+0x5/0x10 [ 1147.078013] kmem_cache_alloc+0x5b/0x350 [ 1147.078485] create_object.isra.0+0x3a/0xa10 [ 1147.078976] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1147.079554] kmem_cache_alloc_node_trace+0x16f/0x370 [ 1147.080131] __get_vm_area_node+0xd4/0x340 [ 1147.080618] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 1147.081145] __vmalloc_node_range+0x13f/0x9e0 [ 1147.081648] ? kernel_read_file+0x6b4/0x790 [ 1147.082141] ? kernel_read_file+0x6b4/0x790 [ 1147.082635] ? selinux_kernel_read_file+0x8c/0x400 [ 1147.083183] ? __vmalloc_node+0x100/0x100 [ 1147.083796] ? kernel_read_file+0x6b4/0x790 [ 1147.084436] __vmalloc_node+0xb5/0x100 [ 1147.085042] ? kernel_read_file+0x6b4/0x790 [ 1147.085658] kernel_read_file+0x6b4/0x790 [ 1147.086302] ? __x64_sys_fspick+0x420/0x420 [ 1147.086935] ? __fsnotify_parent+0x532/0xae0 [ 1147.087644] ? cap_capable+0x1e1/0x250 [ 1147.088265] kernel_read_file_from_fd+0x62/0xb0 [ 1147.089010] __do_sys_finit_module+0xe8/0x180 [ 1147.089730] ? __ia32_sys_init_module+0xa0/0xa0 [ 1147.090482] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1147.091252] do_syscall_64+0x33/0x40 [ 1147.091796] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1147.092515] RIP: 0033:0x466609 [ 1147.092984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.095672] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1147.096067] Module has invalid ELF structures [ 1147.096779] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1147.096786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1147.096792] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.096798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.096804] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 17:30:48 executing program 6 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:30:48 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:30:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:30:48 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x6) [ 1147.257166] FAULT_INJECTION: forcing a failure. [ 1147.257166] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.259908] CPU: 0 PID: 15542 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1147.261618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.263993] Call Trace: [ 1147.264566] dump_stack+0x107/0x163 [ 1147.265320] should_fail.cold+0x5/0xa 17:30:48 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1147.266141] ? create_object.isra.0+0x3a/0xa10 [ 1147.267220] should_failslab+0x5/0x10 [ 1147.268020] kmem_cache_alloc+0x5b/0x350 [ 1147.268897] create_object.isra.0+0x3a/0xa10 [ 1147.269854] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1147.270921] kmem_cache_alloc_node+0x16b/0x360 [ 1147.271893] __alloc_skb+0x6d/0x620 [ 1147.272675] netlink_sendmsg+0x951/0xd90 [ 1147.273551] ? netlink_unicast+0x7e0/0x7e0 [ 1147.274462] ? netlink_unicast+0x7e0/0x7e0 [ 1147.275343] sock_sendmsg+0x150/0x190 [ 1147.276140] ____sys_sendmsg+0x701/0x860 [ 1147.277013] ? kernel_sendmsg+0x50/0x50 [ 1147.277865] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1147.278834] ? perf_trace_lock+0xb6/0x470 [ 1147.279712] ? hlock_class+0x120/0x120 [ 1147.280559] ___sys_sendmsg+0xff/0x170 [ 1147.281367] ? sendmsg_copy_msghdr+0x160/0x160 [ 1147.282376] ? __fget_files+0x228/0x410 [ 1147.283245] ? lock_downgrade+0x6d0/0x6d0 [ 1147.284133] ? __fget_files+0x251/0x410 [ 1147.284972] ? __fget_light+0xea/0x280 [ 1147.285819] ? sockfd_lookup_light+0xc6/0x180 [ 1147.286762] __sys_sendmsg+0xe9/0x1b0 [ 1147.287556] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1147.288445] ? rcu_read_lock_any_held+0x69/0x90 [ 1147.289462] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1147.290498] do_syscall_64+0x33/0x40 [ 1147.291261] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1147.292328] RIP: 0033:0x466609 [ 1147.292997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.296816] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.298416] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1147.299990] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1147.301588] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.303178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.304760] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:30:48 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:30:48 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4) 17:30:48 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1147.402680] Module has invalid ELF structures [ 1147.442192] Module has invalid ELF structures [ 1159.975488] kmemleak: 21 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:31:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:31:08 executing program 6 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:31:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:31:08 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x6) 17:31:08 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c) 17:31:08 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:08 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x2) 17:31:08 executing program 5 (fault-call:4 fault-nth:2): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1167.744806] FAULT_INJECTION: forcing a failure. [ 1167.744806] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.747487] CPU: 1 PID: 15872 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1167.748976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1167.751439] Call Trace: [ 1167.752010] dump_stack+0x107/0x163 [ 1167.752796] should_fail.cold+0x5/0xa [ 1167.753612] ? alloc_vmap_area+0x148/0x1cb0 [ 1167.754547] should_failslab+0x5/0x10 [ 1167.755356] kmem_cache_alloc_node+0x55/0x360 [ 1167.756324] alloc_vmap_area+0x148/0x1cb0 [ 1167.757233] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1167.758216] ? kasan_unpoison_shadow+0x34/0x40 [ 1167.759198] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1167.760294] __get_vm_area_node+0x127/0x340 [ 1167.761229] __vmalloc_node_range+0x13f/0x9e0 [ 1167.762204] ? kernel_read_file+0x6b4/0x790 [ 1167.763132] ? kernel_read_file+0x6b4/0x790 [ 1167.764062] ? selinux_kernel_read_file+0x8c/0x400 [ 1167.765119] ? __vmalloc_node+0x100/0x100 [ 1167.766030] ? kernel_read_file+0x6b4/0x790 [ 1167.766969] __vmalloc_node+0xb5/0x100 [ 1167.767798] ? kernel_read_file+0x6b4/0x790 [ 1167.768729] kernel_read_file+0x6b4/0x790 [ 1167.769623] ? __x64_sys_fspick+0x420/0x420 [ 1167.770557] ? __fsnotify_parent+0x532/0xae0 [ 1167.771499] ? cap_capable+0x1e1/0x250 [ 1167.772345] kernel_read_file_from_fd+0x62/0xb0 [ 1167.773354] __do_sys_finit_module+0xe8/0x180 [ 1167.774323] ? __ia32_sys_init_module+0xa0/0xa0 [ 1167.775363] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1167.776411] do_syscall_64+0x33/0x40 [ 1167.777212] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1167.778350] RIP: 0033:0x466609 [ 1167.779045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.783087] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1167.784730] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1167.786286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1167.787813] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.789363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.790943] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1167.792744] warn_alloc: 1 callbacks suppressed [ 1167.792764] syz-executor.5: vmalloc: allocation failure: 4194305 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1167.796445] CPU: 1 PID: 15872 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1167.797904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1167.800357] Call Trace: [ 1167.800922] dump_stack+0x107/0x163 [ 1167.801710] warn_alloc.cold+0x87/0x18d [ 1167.802579] ? zone_watermark_ok_safe+0x260/0x260 [ 1167.803609] ? slab_free_freelist_hook+0x64/0x150 [ 1167.804641] ? kfree+0xca/0x360 [ 1167.805356] ? __get_vm_area_node+0x262/0x340 [ 1167.806340] __vmalloc_node_range+0x58e/0x9e0 [ 1167.807293] ? kernel_read_file+0x6b4/0x790 [ 1167.808222] ? selinux_kernel_read_file+0x8c/0x400 [ 1167.809268] ? __vmalloc_node+0x100/0x100 [ 1167.810173] ? kernel_read_file+0x6b4/0x790 [ 1167.811099] __vmalloc_node+0xb5/0x100 [ 1167.811931] ? kernel_read_file+0x6b4/0x790 [ 1167.812861] kernel_read_file+0x6b4/0x790 [ 1167.813749] ? __x64_sys_fspick+0x420/0x420 [ 1167.814676] ? __fsnotify_parent+0x532/0xae0 [ 1167.815610] ? cap_capable+0x1e1/0x250 [ 1167.816455] kernel_read_file_from_fd+0x62/0xb0 [ 1167.817455] __do_sys_finit_module+0xe8/0x180 [ 1167.818431] ? __ia32_sys_init_module+0xa0/0xa0 [ 1167.819465] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1167.820498] do_syscall_64+0x33/0x40 [ 1167.821294] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1167.822400] RIP: 0033:0x466609 [ 1167.823100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.827147] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1167.828778] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1167.830315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1167.831845] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.833368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.834899] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1167.836544] Mem-Info: [ 1167.837096] active_anon:152 inactive_anon:135357 isolated_anon:0 [ 1167.837096] active_file:14533 inactive_file:46760 isolated_file:0 [ 1167.837096] unevictable:0 dirty:265 writeback:0 [ 1167.837096] slab_reclaimable:8741 slab_unreclaimable:66481 [ 1167.837096] mapped:80893 shmem:92367 pagetables:7146 bounce:0 [ 1167.837096] free:60891 free_pcp:510 free_cma:0 [ 1167.844086] Node 0 active_anon:608kB inactive_anon:541428kB active_file:58132kB inactive_file:187040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:323572kB dirty:1060kB writeback:0kB shmem:369468kB writeback_tmp:0kB kernel_stack:10592kB all_unreclaimable? no [ 1167.849364] Node 0 DMA free:15892kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.854975] lowmem_reserve[]: 0 1621 1621 1621 [ 1167.856043] Node 0 DMA32 free:227560kB min:5124kB low:6784kB high:8444kB reserved_highatomic:0KB active_anon:608kB inactive_anon:541428kB active_file:58132kB inactive_file:187040kB unevictable:0kB writepending:1060kB present:2080640kB managed:1665312kB mlocked:0kB pagetables:28460kB bounce:0kB free_pcp:2068kB local_pcp:988kB free_cma:0kB [ 1167.862400] lowmem_reserve[]: 0 0 0 0 [ 1167.863252] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15892kB [ 1167.866357] Node 0 DMA32: 342*4kB (UME) 516*8kB (UME) 414*16kB (UME) 108*32kB (UME) 66*64kB (UME) 41*128kB (UME) 19*256kB (UME) 6*512kB (UM) 2*1024kB (UE) 2*2048kB (U) 46*4096kB (M) = 227544kB [ 1167.870254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.872130] 118395 total pagecache pages [ 1167.873020] 0 pages in swap cache [ 1167.873786] Swap cache stats: add 0, delete 0, find 0/0 [ 1167.874978] Free swap = 0kB [ 1167.875653] Total swap = 0kB [ 1167.876353] 524158 pages RAM [ 1167.876999] 0 pages HighMem/MovableOnly [ 1167.877907] 103853 pages reserved 17:31:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 1167.907659] FAULT_INJECTION: forcing a failure. [ 1167.907659] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.910167] CPU: 1 PID: 16028 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1167.911651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1167.914083] Call Trace: [ 1167.914697] dump_stack+0x107/0x163 [ 1167.915486] should_fail.cold+0x5/0xa [ 1167.916309] should_failslab+0x5/0x10 [ 1167.917121] __kmalloc_node_track_caller+0x74/0x400 [ 1167.918192] ? netlink_sendmsg+0x951/0xd90 [ 1167.919089] ? kmem_cache_alloc_node+0x2bb/0x360 [ 1167.920105] __alloc_skb+0xb1/0x620 [ 1167.920888] netlink_sendmsg+0x951/0xd90 [ 1167.921764] ? netlink_unicast+0x7e0/0x7e0 [ 1167.922690] ? netlink_unicast+0x7e0/0x7e0 [ 1167.923598] sock_sendmsg+0x150/0x190 [ 1167.924418] ____sys_sendmsg+0x701/0x860 [ 1167.925303] ? kernel_sendmsg+0x50/0x50 [ 1167.926272] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1167.927751] ? perf_trace_lock+0xb6/0x470 [ 1167.928900] ? hlock_class+0x120/0x120 [ 1167.929801] ___sys_sendmsg+0xff/0x170 [ 1167.930633] ? sendmsg_copy_msghdr+0x160/0x160 [ 1167.931587] ? __fget_files+0x228/0x410 [ 1167.932404] ? lock_downgrade+0x6d0/0x6d0 [ 1167.933273] ? __fget_files+0x251/0x410 [ 1167.934110] ? __fget_light+0xea/0x280 [ 1167.934946] ? sockfd_lookup_light+0xc6/0x180 [ 1167.935926] __sys_sendmsg+0xe9/0x1b0 [ 1167.936708] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1167.937620] ? rcu_read_lock_any_held+0x69/0x90 [ 1167.938773] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1167.939782] do_syscall_64+0x33/0x40 [ 1167.940553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1167.941608] RIP: 0033:0x466609 [ 1167.942304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.946113] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.947708] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1167.949273] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1167.950826] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.952511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.953997] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:31:09 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:09 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x600) 17:31:09 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c) 17:31:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:31:09 executing program 6 (fault-call:1 fault-nth:5): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:31:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4) 17:31:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 1168.311827] FAULT_INJECTION: forcing a failure. [ 1168.311827] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.314365] CPU: 0 PID: 16474 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1168.315830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1168.318210] Call Trace: [ 1168.318778] dump_stack+0x107/0x163 [ 1168.319550] should_fail.cold+0x5/0xa [ 1168.320365] ? create_object.isra.0+0x3a/0xa10 [ 1168.321322] should_failslab+0x5/0x10 [ 1168.322124] kmem_cache_alloc+0x5b/0x350 [ 1168.322993] create_object.isra.0+0x3a/0xa10 [ 1168.323961] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1168.325045] __kmalloc_node_track_caller+0x1b8/0x400 [ 1168.326170] ? netlink_sendmsg+0x951/0xd90 [ 1168.327069] ? kmem_cache_alloc_node+0x2bb/0x360 [ 1168.328089] __alloc_skb+0xb1/0x620 [ 1168.328871] netlink_sendmsg+0x951/0xd90 [ 1168.329759] ? netlink_unicast+0x7e0/0x7e0 [ 1168.330670] ? netlink_unicast+0x7e0/0x7e0 [ 1168.331593] sock_sendmsg+0x150/0x190 [ 1168.332399] ____sys_sendmsg+0x701/0x860 [ 1168.333290] ? kernel_sendmsg+0x50/0x50 [ 1168.334174] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1168.335272] ? perf_trace_lock+0xb6/0x470 [ 1168.336212] ? hlock_class+0x120/0x120 [ 1168.337119] ___sys_sendmsg+0xff/0x170 [ 1168.337946] ? sendmsg_copy_msghdr+0x160/0x160 [ 1168.338925] ? __fget_files+0x228/0x410 [ 1168.339775] ? lock_downgrade+0x6d0/0x6d0 [ 1168.340667] ? __fget_files+0x251/0x410 [ 1168.341508] ? __fget_light+0xea/0x280 [ 1168.342410] ? sockfd_lookup_light+0xc6/0x180 [ 1168.343384] __sys_sendmsg+0xe9/0x1b0 [ 1168.344200] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1168.345126] ? rcu_read_lock_any_held+0x69/0x90 [ 1168.346132] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1168.347193] do_syscall_64+0x33/0x40 [ 1168.347998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1168.349119] RIP: 0033:0x466609 [ 1168.349805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.353813] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.355429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1168.356940] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1168.358448] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.359954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.361454] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 [ 1182.117482] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:31:31 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:31:31 executing program 5 (fault-call:4 fault-nth:3): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) 17:31:31 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c00) 17:31:31 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x600) 17:31:31 executing program 6 (fault-call:1 fault-nth:6): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:31:31 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x6) [ 1190.449850] FAULT_INJECTION: forcing a failure. [ 1190.449850] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.451740] CPU: 1 PID: 16720 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1190.452783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1190.454496] Call Trace: [ 1190.454911] dump_stack+0x107/0x163 [ 1190.455472] should_fail.cold+0x5/0xa [ 1190.456057] ? create_object.isra.0+0x3a/0xa10 [ 1190.456754] should_failslab+0x5/0x10 [ 1190.457334] kmem_cache_alloc+0x5b/0x350 [ 1190.457965] create_object.isra.0+0x3a/0xa10 [ 1190.458758] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1190.459859] kmem_cache_alloc_node+0x16b/0x360 [ 1190.460842] alloc_vmap_area+0x148/0x1cb0 [ 1190.461726] ? asm_sysvec_call_function_single+0x12/0x20 [ 1190.462910] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1190.463866] ? kasan_unpoison_shadow+0x34/0x40 [ 1190.464838] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1190.465922] __get_vm_area_node+0x127/0x340 [ 1190.466875] __vmalloc_node_range+0x13f/0x9e0 [ 1190.467829] ? kernel_read_file+0x6b4/0x790 [ 1190.468747] ? kernel_read_file+0x6b4/0x790 [ 1190.469671] ? selinux_kernel_read_file+0x8c/0x400 [ 1190.470721] ? __vmalloc_node+0x100/0x100 [ 1190.471616] ? kernel_read_file+0x6b4/0x790 [ 1190.472532] __vmalloc_node+0xb5/0x100 [ 1190.473360] ? kernel_read_file+0x6b4/0x790 [ 1190.474305] kernel_read_file+0x6b4/0x790 [ 1190.475202] ? __x64_sys_fspick+0x420/0x420 [ 1190.476114] ? __fsnotify_parent+0x532/0xae0 [ 1190.477041] ? cap_capable+0x1e1/0x250 [ 1190.477875] kernel_read_file_from_fd+0x62/0xb0 [ 1190.478887] __do_sys_finit_module+0xe8/0x180 [ 1190.479835] ? __ia32_sys_init_module+0xa0/0xa0 [ 1190.480882] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1190.481911] do_syscall_64+0x33/0x40 [ 1190.482719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1190.483815] RIP: 0033:0x466609 [ 1190.484510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.488431] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1190.490078] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1190.491602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1190.493112] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.494639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.496157] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 17:31:31 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb8}}, 0x0) [ 1190.519165] FAULT_INJECTION: forcing a failure. [ 1190.519165] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.520616] CPU: 0 PID: 16733 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1190.521480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1190.523196] Call Trace: [ 1190.523613] dump_stack+0x107/0x163 [ 1190.524070] should_fail.cold+0x5/0xa [ 1190.524545] ? __skb_ext_alloc+0x19/0x80 [ 1190.525026] should_failslab+0x5/0x10 [ 1190.525499] kmem_cache_alloc+0x5b/0x350 [ 1190.525975] __skb_ext_alloc+0x19/0x80 [ 1190.526454] skb_ext_add+0x503/0x670 [ 1190.526906] ? netlink_sendmsg+0x951/0xd90 [ 1190.527463] __alloc_skb+0x3c1/0x620 [ 1190.527891] netlink_sendmsg+0x951/0xd90 [ 1190.528366] ? netlink_unicast+0x7e0/0x7e0 [ 1190.528840] ? netlink_unicast+0x7e0/0x7e0 [ 1190.529335] sock_sendmsg+0x150/0x190 [ 1190.529758] ____sys_sendmsg+0x701/0x860 [ 1190.530239] ? kernel_sendmsg+0x50/0x50 [ 1190.530698] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1190.531239] ? perf_trace_lock+0xb6/0x470 [ 1190.531693] ? hlock_class+0x120/0x120 [ 1190.532151] ___sys_sendmsg+0xff/0x170 [ 1190.532604] ? sendmsg_copy_msghdr+0x160/0x160 [ 1190.533110] ? __fget_files+0x228/0x410 [ 1190.533574] ? lock_downgrade+0x6d0/0x6d0 [ 1190.534066] ? __fget_files+0x251/0x410 [ 1190.534531] ? __fget_light+0xea/0x280 [ 1190.534988] ? sockfd_lookup_light+0xc6/0x180 [ 1190.535504] __sys_sendmsg+0xe9/0x1b0 [ 1190.535948] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1190.536451] ? rcu_read_lock_any_held+0x69/0x90 [ 1190.536998] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1190.537541] do_syscall_64+0x33/0x40 [ 1190.537971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1190.538582] RIP: 0033:0x466609 [ 1190.538956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.541092] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.541923] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1190.542771] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1190.543620] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.544467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.545307] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:31:31 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c) 17:31:31 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c00) 17:31:31 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) [ 1190.762379] Module has invalid ELF structures [ 1190.794648] Module has invalid ELF structures [ 1204.478164] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 17:31:53 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) 17:31:53 executing program 5 (fault-call:4 fault-nth:4): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:53 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:31:53 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x3f00) 17:31:53 executing program 6 (fault-call:1 fault-nth:7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:31:53 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x3f00) 17:31:53 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x600) 17:31:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 1212.836693] FAULT_INJECTION: forcing a failure. [ 1212.836693] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.838054] CPU: 0 PID: 17419 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1212.838807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1212.840083] Call Trace: [ 1212.840390] dump_stack+0x107/0x163 [ 1212.840790] should_fail.cold+0x5/0xa [ 1212.841210] ? kmemleak_scan_area+0x75/0x350 [ 1212.841693] should_failslab+0x5/0x10 [ 1212.842116] kmem_cache_alloc+0x5b/0x350 [ 1212.842572] kmemleak_scan_area+0x75/0x350 [ 1212.843061] alloc_vmap_area+0x171/0x1cb0 [ 1212.843524] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1212.844015] ? kasan_unpoison_shadow+0x34/0x40 [ 1212.844522] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1212.845088] __get_vm_area_node+0x127/0x340 [ 1212.845580] __vmalloc_node_range+0x13f/0x9e0 [ 1212.846076] ? kernel_read_file+0x6b4/0x790 [ 1212.846551] ? kernel_read_file+0x6b4/0x790 [ 1212.847058] ? selinux_kernel_read_file+0x8c/0x400 [ 1212.847611] FAULT_INJECTION: forcing a failure. [ 1212.847611] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.848838] ? __vmalloc_node+0x100/0x100 [ 1212.849319] ? kernel_read_file+0x6b4/0x790 [ 1212.849810] __vmalloc_node+0xb5/0x100 [ 1212.850255] ? kernel_read_file+0x6b4/0x790 [ 1212.850751] kernel_read_file+0x6b4/0x790 [ 1212.851257] ? __x64_sys_fspick+0x420/0x420 [ 1212.851747] ? __fsnotify_parent+0x532/0xae0 [ 1212.852242] ? cap_capable+0x1e1/0x250 [ 1212.852691] kernel_read_file_from_fd+0x62/0xb0 [ 1212.853218] __do_sys_finit_module+0xe8/0x180 [ 1212.853724] ? __ia32_sys_init_module+0xa0/0xa0 [ 1212.854279] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1212.854838] do_syscall_64+0x33/0x40 [ 1212.855282] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.855869] RIP: 0033:0x466609 [ 1212.856240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.858319] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1212.859212] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1212.860057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1212.860897] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.861741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.862588] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1212.863503] CPU: 1 PID: 17436 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1212.864549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1212.865626] kmemleak: Cannot allocate a scan area, scanning the full object [ 1212.866154] Call Trace: [ 1212.866180] dump_stack+0x107/0x163 [ 1212.866196] should_fail.cold+0x5/0xa [ 1212.866214] ? create_object.isra.0+0x3a/0xa10 [ 1212.866228] should_failslab+0x5/0x10 [ 1212.866241] kmem_cache_alloc+0x5b/0x350 [ 1212.866259] create_object.isra.0+0x3a/0xa10 [ 1212.866273] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1212.866287] kmem_cache_alloc+0x15b/0x350 [ 1212.866303] __skb_ext_alloc+0x19/0x80 [ 1212.866313] skb_ext_add+0x503/0x670 [ 1212.866326] ? netlink_sendmsg+0x951/0xd90 [ 1212.866340] __alloc_skb+0x3c1/0x620 [ 1212.866355] netlink_sendmsg+0x951/0xd90 [ 1212.866372] ? netlink_unicast+0x7e0/0x7e0 [ 1212.866390] ? netlink_unicast+0x7e0/0x7e0 [ 1212.866404] sock_sendmsg+0x150/0x190 [ 1212.866417] ____sys_sendmsg+0x701/0x860 [ 1212.866432] ? kernel_sendmsg+0x50/0x50 [ 1212.866441] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1212.866458] ? perf_trace_lock+0xb6/0x470 [ 1212.866469] ? hlock_class+0x120/0x120 [ 1212.866484] ___sys_sendmsg+0xff/0x170 [ 1212.866496] ? sendmsg_copy_msghdr+0x160/0x160 [ 1212.866511] ? __fget_files+0x228/0x410 [ 1212.866523] ? lock_downgrade+0x6d0/0x6d0 [ 1212.866542] ? __fget_files+0x251/0x410 [ 1212.866558] ? __fget_light+0xea/0x280 [ 1212.866573] ? sockfd_lookup_light+0xc6/0x180 [ 1212.866584] __sys_sendmsg+0xe9/0x1b0 [ 1212.866595] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1212.866608] ? rcu_read_lock_any_held+0x69/0x90 [ 1212.866630] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1212.866645] do_syscall_64+0x33/0x40 [ 1212.866659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.866669] RIP: 0033:0x466609 [ 1212.866683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.866689] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.866704] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1212.866711] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1212.866718] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.866725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.866733] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 [ 1212.875626] Module has invalid ELF structures [ 1212.875843] [ 1212.875848] ====================================================== [ 1212.875851] WARNING: possible circular locking dependency detected [ 1212.875854] 5.10.60 #1 Not tainted [ 1212.875857] ------------------------------------------------------ [ 1212.875860] syz-executor.5/17419 is trying to acquire lock: [ 1212.875863] ffffffff84d0a920 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x2c6/0x4d0 [ 1212.875872] [ 1212.875875] but task is already holding lock: [ 1212.875877] ffff88803379cd98 (&object->lock){..-.}-{2:2}, at: kmemleak_scan_area+0x80/0x350 [ 1212.875886] [ 1212.875889] which lock already depends on the new lock. [ 1212.875890] [ 1212.875891] [ 1212.875894] the existing dependency chain (in reverse order) is: [ 1212.875895] [ 1212.875897] -> #5 (&object->lock){..-.}-{2:2}: [ 1212.875905] _raw_spin_lock_irqsave+0x36/0x50 [ 1212.875908] __delete_object+0x87/0x100 [ 1212.875910] slab_free_freelist_hook+0xb0/0x150 [ 1212.875912] kmem_cache_free+0x99/0x2f0 [ 1212.875915] collect_signal+0x2a4/0x520 [ 1212.875917] dequeue_signal+0x322/0x620 [ 1212.875919] get_signal+0x6e9/0x2210 [ 1212.875921] arch_do_signal+0x88/0x1b00 [ 1212.875923] exit_to_user_mode_prepare+0xf7/0x160 [ 1212.875926] syscall_exit_to_user_mode+0x38/0x230 [ 1212.875928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.875929] [ 1212.875931] -> #4 (&sighand->siglock){..-.}-{2:2}: [ 1212.875939] _raw_spin_lock_irqsave+0x36/0x50 [ 1212.875942] __lock_task_sighand+0xd3/0x2f0 [ 1212.875944] task_work_add+0x1db/0x2b0 [ 1212.875946] __io_async_wake+0x40b/0x8d0 [ 1212.875948] __wake_up_common+0x14c/0x4c0 [ 1212.875951] __wake_up_common_lock+0xd0/0x130 [ 1212.875953] tty_ldisc_lock+0x40/0xb0 [ 1212.875955] tty_ldisc_hangup+0x207/0x6b0 [ 1212.875957] __tty_hangup.part.0+0x50d/0x9b0 [ 1212.875959] tty_ioctl+0xfde/0x1600 [ 1212.875961] __x64_sys_ioctl+0x196/0x210 [ 1212.875963] do_syscall_64+0x33/0x40 [ 1212.875966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.875967] [ 1212.875968] -> #3 (&tty->read_wait){....}-{2:2}: [ 1212.875977] _raw_spin_lock+0x27/0x40 [ 1212.875979] io_poll_double_wake+0x1f8/0x550 [ 1212.875981] __wake_up_common+0x14c/0x4c0 [ 1212.875984] __wake_up_common_lock+0xd0/0x130 [ 1212.875986] tty_ldisc_lock+0x55/0xb0 [ 1212.875988] tty_ldisc_hangup+0x207/0x6b0 [ 1212.875990] __tty_hangup.part.0+0x50d/0x9b0 [ 1212.875992] tty_ioctl+0xfde/0x1600 [ 1212.875994] __x64_sys_ioctl+0x196/0x210 [ 1212.875996] do_syscall_64+0x33/0x40 [ 1212.875999] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.876000] [ 1212.876001] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 1212.876010] _raw_spin_lock_irqsave+0x36/0x50 [ 1212.876012] __wake_up_common_lock+0xb4/0x130 [ 1212.876014] tty_port_default_wakeup+0x26/0x40 [ 1212.876016] serial8250_tx_chars+0x516/0xac0 [ 1212.876019] serial8250_handle_irq.part.0+0x2d9/0x4d0 [ 1212.876021] serial8250_default_handle_irq+0xb8/0x230 [ 1212.876024] serial8250_interrupt+0xf4/0x1a0 [ 1212.876026] __handle_irq_event_percpu+0x2ef/0x820 [ 1212.876028] handle_irq_event+0x102/0x290 [ 1212.876031] handle_edge_irq+0x249/0xd00 [ 1212.876033] asm_call_irq_on_stack+0x12/0x20 [ 1212.876035] common_interrupt+0xdd/0x190 [ 1212.876037] asm_common_interrupt+0x1e/0x40 [ 1212.876040] _raw_spin_unlock_irqrestore+0x25/0x40 [ 1212.876042] uart_write+0x30b/0x5f0 [ 1212.876044] do_output_char+0x5e4/0x860 [ 1212.876046] n_tty_write+0x47c/0xf80 [ 1212.876048] file_tty_write.constprop.0+0x4f8/0x8d0 [ 1212.876050] redirected_tty_write+0xa1/0xc0 [ 1212.876053] do_iter_readv_writev+0x471/0x750 [ 1212.876055] do_iter_write+0x18d/0x670 [ 1212.876057] vfs_writev+0x1d7/0x620 [ 1212.876059] do_writev+0x139/0x300 [ 1212.876061] do_syscall_64+0x33/0x40 [ 1212.876063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.876064] [ 1212.876066] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1212.876074] _raw_spin_lock_irqsave+0x36/0x50 [ 1212.876076] serial8250_console_write+0x8e2/0xb20 [ 1212.876078] console_unlock+0x823/0xb30 [ 1212.876081] register_console+0x523/0x800 [ 1212.876083] univ8250_console_init+0x3a/0x46 [ 1212.876085] console_init+0x361/0x4fa [ 1212.876087] start_kernel+0x2ed/0x496 [ 1212.876090] secondary_startup_64_no_verify+0xc2/0xcb [ 1212.876091] [ 1212.876092] -> #0 (console_owner){-.-.}-{0:0}: [ 1212.876100] __lock_acquire+0x29fd/0x5b60 [ 1212.876102] lock_acquire+0x197/0x490 [ 1212.876104] vprintk_emit+0x303/0x4d0 [ 1212.876106] vprintk_func+0x8b/0x140 [ 1212.876108] printk+0xba/0xed 17:31:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) [ 1212.876110] kmemleak_scan_area+0x328/0x350 [ 1212.876113] alloc_vmap_area+0x171/0x1cb0 [ 1212.876115] __get_vm_area_node+0x127/0x340 [ 1212.876117] __vmalloc_node_range+0x13f/0x9e0 [ 1212.876119] __vmalloc_node+0xb5/0x100 [ 1212.876121] kernel_read_file+0x6b4/0x790 [ 1212.876124] kernel_read_file_from_fd+0x62/0xb0 [ 1212.876126] __do_sys_finit_module+0xe8/0x180 [ 1212.876128] do_syscall_64+0x33/0x40 [ 1212.876130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.876131] [ 1212.876134] other info that might help us debug this: [ 1212.876135] [ 1212.876136] Chain exists of: [ 1212.876138] console_owner --> &sighand->siglock --> &object->lock [ 1212.876148] [ 1212.876151] Possible unsafe locking scenario: [ 1212.876152] [ 1212.876154] CPU0 CPU1 [ 1212.876156] ---- ---- [ 1212.876157] lock(&object->lock); [ 1212.876163] lock(&sighand->siglock); [ 1212.876169] lock(&object->lock); [ 1212.876175] lock(console_owner); [ 1212.876179] [ 1212.876181] *** DEADLOCK *** [ 1212.876182] [ 1212.876184] 1 lock held by syz-executor.5/17419: [ 1212.876186] #0: ffff88803379cd98 (&object->lock){..-.}-{2:2}, at: kmemleak_scan_area+0x80/0x350 [ 1212.876198] [ 1212.876199] stack backtrace: [ 1212.876202] CPU: 0 PID: 17419 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1212.876207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1212.876208] Call Trace: 17:31:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) [ 1212.876210] dump_stack+0x107/0x163 [ 1212.876212] check_noncircular+0x268/0x310 [ 1212.876214] ? print_circular_bug+0x470/0x470 [ 1212.876216] ? find_first_zero_bit+0x94/0xb0 [ 1212.876218] __lock_acquire+0x29fd/0x5b60 [ 1212.876221] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1212.876223] ? hlock_class+0x120/0x120 [ 1212.876225] ? __lockdep_reset_lock+0x180/0x180 [ 1212.876227] lock_acquire+0x197/0x490 [ 1212.876229] ? vprintk_emit+0x2c6/0x4d0 [ 1212.876231] ? lock_release+0x6b0/0x6b0 [ 1212.876233] ? lock_downgrade+0x6d0/0x6d0 [ 1212.876235] ? do_raw_spin_lock+0x129/0x270 [ 1212.876237] ? rwlock_bug.part.0+0x90/0x90 [ 1212.876238] vprintk_emit+0x303/0x4d0 [ 1212.876240] ? vprintk_emit+0x2c6/0x4d0 [ 1212.876242] vprintk_func+0x8b/0x140 [ 1212.876244] printk+0xba/0xed [ 1212.876246] ? record_print_text.cold+0x16/0x16 [ 1212.876248] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1212.876250] ? do_raw_spin_lock+0x129/0x270 [ 1212.876252] kmemleak_scan_area+0x328/0x350 [ 1212.876254] alloc_vmap_area+0x171/0x1cb0 [ 1212.876256] ? purge_vmap_area_lazy+0xc0/0xc0 [ 1212.876258] ? kasan_unpoison_shadow+0x34/0x40 [ 1212.876261] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1212.876263] __get_vm_area_node+0x127/0x340 [ 1212.876265] __vmalloc_node_range+0x13f/0x9e0 [ 1212.876267] ? kernel_read_file+0x6b4/0x790 [ 1212.876269] ? kernel_read_file+0x6b4/0x790 [ 1212.876271] ? selinux_kernel_read_file+0x8c/0x400 [ 1212.876273] ? __vmalloc_node+0x100/0x100 [ 1212.876275] ? kernel_read_file+0x6b4/0x790 [ 1212.876277] __vmalloc_node+0xb5/0x100 [ 1212.876279] ? kernel_read_file+0x6b4/0x790 [ 1212.876281] kernel_read_file+0x6b4/0x790 [ 1212.876283] ? __x64_sys_fspick+0x420/0x420 [ 1212.876285] ? __fsnotify_parent+0x532/0xae0 [ 1212.876287] ? cap_capable+0x1e1/0x250 [ 1212.876289] kernel_read_file_from_fd+0x62/0xb0 [ 1212.876291] __do_sys_finit_module+0xe8/0x180 [ 1212.876293] ? __ia32_sys_init_module+0xa0/0xa0 [ 1212.876295] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1212.876297] do_syscall_64+0x33/0x40 [ 1212.876300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.876301] RIP: 0033:0x466609 [ 1212.876310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.876313] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1212.876321] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1212.876325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1212.876330] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.876334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.876339] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 17:31:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4000) 17:31:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x1c00) 17:31:54 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4000) 17:31:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x0) [ 1213.105968] Module has invalid ELF structures [ 1213.168822] FAT-fs (loop0): Unrecognized mount option "subj_user=" or missing value 17:32:03 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:32:03 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x40000) 17:32:03 executing program 6 (fault-call:1 fault-nth:8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:32:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:32:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:32:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x3f00) 17:32:03 executing program 5 (fault-call:4 fault-nth:5): r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 17:32:03 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x40000) [ 1222.149501] FAULT_INJECTION: forcing a failure. [ 1222.149501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.152231] CPU: 0 PID: 18129 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1222.153714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1222.156180] Call Trace: [ 1222.156755] dump_stack+0x107/0x163 [ 1222.157539] should_fail.cold+0x5/0xa [ 1222.158369] _copy_from_iter_full+0x1fd/0x920 [ 1222.159379] ? __check_object_size+0x319/0x440 [ 1222.160368] netlink_sendmsg+0x7c6/0xd90 [ 1222.161257] ? netlink_unicast+0x7e0/0x7e0 [ 1222.162178] ? netlink_unicast+0x7e0/0x7e0 [ 1222.163091] sock_sendmsg+0x150/0x190 [ 1222.163924] ____sys_sendmsg+0x701/0x860 [ 1222.164796] ? kernel_sendmsg+0x50/0x50 [ 1222.165641] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1222.166644] ? perf_trace_lock+0xb6/0x470 [ 1222.167557] ? hlock_class+0x120/0x120 [ 1222.167626] Module has invalid ELF structures [ 1222.168392] ___sys_sendmsg+0xff/0x170 [ 1222.168409] ? sendmsg_copy_msghdr+0x160/0x160 [ 1222.168428] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.168451] ? perf_trace_lock+0xb6/0x470 [ 1222.172106] FAULT_INJECTION: forcing a failure. [ 1222.172106] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.172245] ? __fget_files+0x228/0x410 [ 1222.172266] ? lock_downgrade+0x6d0/0x6d0 [ 1222.177210] ? __lockdep_reset_lock+0x180/0x180 [ 1222.178204] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.179225] ? __fget_files+0x251/0x410 [ 1222.180076] ? __fget_light+0xea/0x280 [ 1222.180912] ? sockfd_lookup_light+0xc6/0x180 [ 1222.181882] __sys_sendmsg+0xe9/0x1b0 [ 1222.182688] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1222.183634] ? rcu_read_lock_any_held+0x5/0x90 [ 1222.184623] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.185645] do_syscall_64+0x33/0x40 [ 1222.186449] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1222.187564] RIP: 0033:0x466609 [ 1222.188251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.192220] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.193826] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1222.195363] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1222.196897] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1222.198427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.199983] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 [ 1222.201540] CPU: 1 PID: 18134 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1222.203489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1222.206512] Call Trace: [ 1222.207137] dump_stack+0x107/0x163 [ 1222.207975] should_fail.cold+0x5/0xa [ 1222.208911] ? __get_vm_area_node+0xd4/0x340 [ 1222.209999] should_failslab+0x5/0x10 [ 1222.210840] kmem_cache_alloc_node_trace+0x59/0x370 [ 1222.211962] __get_vm_area_node+0xd4/0x340 [ 1222.212840] __vmalloc_node_range+0x13f/0x9e0 [ 1222.213750] ? kernel_read_file+0x6b4/0x790 [ 1222.214619] ? kernel_read_file+0x6b4/0x790 [ 1222.215516] ? lock_release+0x4db/0x6b0 [ 1222.216303] ? __get_vm_area_node+0x25d/0x340 [ 1222.217235] ? lock_downgrade+0x6d0/0x6d0 [ 1222.218066] ? do_raw_spin_lock+0x129/0x270 [ 1222.218948] ? __vmalloc_node+0x100/0x100 [ 1222.219812] ? rwlock_bug.part.0+0x90/0x90 [ 1222.220665] ? kasan_unpoison_shadow+0x34/0x40 [ 1222.221592] ? kernel_read_file+0x6b4/0x790 [ 1222.222452] __vmalloc_node+0xb5/0x100 [ 1222.223279] ? kernel_read_file+0x6b4/0x790 [ 1222.224171] __vmalloc_node_range+0x2ab/0x9e0 [ 1222.225093] ? __vmalloc_node+0x100/0x100 [ 1222.225945] ? kernel_read_file+0x6b4/0x790 [ 1222.226825] __vmalloc_node+0xb5/0x100 [ 1222.227642] ? kernel_read_file+0x6b4/0x790 [ 1222.228585] kernel_read_file+0x6b4/0x790 [ 1222.229459] ? __x64_sys_fspick+0x420/0x420 [ 1222.230380] ? __fsnotify_parent+0x532/0xae0 [ 1222.231346] ? cap_capable+0x1e1/0x250 [ 1222.232204] kernel_read_file_from_fd+0x62/0xb0 [ 1222.233315] __do_sys_finit_module+0xe8/0x180 [ 1222.234266] ? __ia32_sys_init_module+0xa0/0xa0 [ 1222.235323] ? __ia32_sys_read+0xa0/0xa0 [ 1222.236197] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.237215] do_syscall_64+0x33/0x40 [ 1222.238001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1222.239101] RIP: 0033:0x466609 [ 1222.239806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.243730] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1222.245338] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1222.246848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1222.248398] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 17:32:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) [ 1222.249889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.251687] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1222.253361] syz-executor.5: vmalloc: allocation failure: 8200 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1222.256206] CPU: 1 PID: 18134 Comm: syz-executor.5 Not tainted 5.10.60 #1 [ 1222.257688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1222.260103] Call Trace: [ 1222.260702] dump_stack+0x107/0x163 [ 1222.261477] warn_alloc.cold+0x87/0x18d [ 1222.262333] ? zone_watermark_ok_safe+0x260/0x260 [ 1222.263379] ? __get_vm_area_node+0xd4/0x340 [ 1222.264345] ? __kasan_kmalloc.constprop.0+0x9e/0xd0 [ 1222.265428] ? __get_vm_area_node+0x262/0x340 [ 1222.266388] __vmalloc_node_range+0x58e/0x9e0 [ 1222.267371] ? kernel_read_file+0x6b4/0x790 [ 1222.268315] ? lock_release+0x4db/0x6b0 [ 1222.269141] ? __get_vm_area_node+0x25d/0x340 [ 1222.270099] ? lock_downgrade+0x6d0/0x6d0 [ 1222.270987] ? do_raw_spin_lock+0x129/0x270 [ 1222.271933] ? __vmalloc_node+0x100/0x100 [ 1222.272842] ? rwlock_bug.part.0+0x90/0x90 [ 1222.273748] ? kasan_unpoison_shadow+0x34/0x40 [ 1222.274725] ? kernel_read_file+0x6b4/0x790 [ 1222.275686] __vmalloc_node+0xb5/0x100 [ 1222.276537] ? kernel_read_file+0x6b4/0x790 [ 1222.277438] __vmalloc_node_range+0x2ab/0x9e0 [ 1222.278401] ? __vmalloc_node+0x100/0x100 [ 1222.279313] ? kernel_read_file+0x6b4/0x790 [ 1222.280258] __vmalloc_node+0xb5/0x100 [ 1222.281077] ? kernel_read_file+0x6b4/0x790 [ 1222.282013] kernel_read_file+0x6b4/0x790 [ 1222.282939] ? __x64_sys_fspick+0x420/0x420 [ 1222.283887] ? __fsnotify_parent+0x532/0xae0 [ 1222.284832] ? cap_capable+0x1e1/0x250 [ 1222.285686] kernel_read_file_from_fd+0x62/0xb0 [ 1222.286683] __do_sys_finit_module+0xe8/0x180 [ 1222.287685] ? __ia32_sys_init_module+0xa0/0xa0 [ 1222.288720] ? __ia32_sys_read+0xa0/0xa0 [ 1222.289619] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.290659] do_syscall_64+0x33/0x40 [ 1222.291499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1222.292572] RIP: 0033:0x466609 [ 1222.293225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.297148] RSP: 002b:00007f5ee8c39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1222.298881] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1222.300551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1222.302171] RBP: 00007f5ee8c391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1222.303899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.305952] R13: 00007ffeac66541f R14: 00007f5ee8c39300 R15: 0000000000022000 [ 1222.308767] Mem-Info: [ 1222.309498] active_anon:151 inactive_anon:135461 isolated_anon:0 [ 1222.309498] active_file:14551 inactive_file:46830 isolated_file:0 [ 1222.309498] unevictable:0 dirty:393 writeback:0 [ 1222.309498] slab_reclaimable:8773 slab_unreclaimable:66973 [ 1222.309498] mapped:80948 shmem:92367 pagetables:7160 bounce:0 [ 1222.309498] free:60063 free_pcp:518 free_cma:0 [ 1222.316096] Node 0 active_anon:604kB inactive_anon:541844kB active_file:58204kB inactive_file:187320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:323792kB dirty:1572kB writeback:0kB shmem:369468kB writeback_tmp:0kB kernel_stack:10720kB all_unreclaimable? no [ 1222.321023] Node 0 DMA free:15892kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1222.326358] lowmem_reserve[]: 0 1621 1621 1621 [ 1222.327392] Node 0 DMA32 free:224168kB min:5124kB low:6784kB high:8444kB reserved_highatomic:0KB active_anon:604kB inactive_anon:541844kB active_file:58204kB inactive_file:187320kB unevictable:0kB writepending:1612kB present:2080640kB managed:1665312kB mlocked:0kB pagetables:28640kB bounce:0kB free_pcp:1980kB local_pcp:728kB free_cma:0kB [ 1222.333622] lowmem_reserve[]: 0 0 0 0 [ 1222.334554] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15892kB [ 1222.337935] Node 0 DMA32: 170*4kB (M) 290*8kB (UME) 361*16kB (UME) 73*32kB (ME) 72*64kB (UME) 40*128kB (UM) 21*256kB (UME) 5*512kB (UM) 3*1024kB (UE) 2*2048kB (U) 46*4096kB (M) = 224360kB [ 1222.342106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1222.344058] 118478 total pagecache pages [ 1222.344958] 0 pages in swap cache [ 1222.345744] Swap cache stats: add 0, delete 0, find 0/0 [ 1222.346902] Free swap = 0kB [ 1222.347641] Total swap = 0kB [ 1222.348278] 524158 pages RAM [ 1222.348948] 0 pages HighMem/MovableOnly [ 1222.349828] 103853 pages reserved 17:32:03 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x204000) 17:32:03 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) 17:32:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 17:32:03 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x204000) 17:32:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x4000) 17:32:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@dfltgid}, {@access_user}, {@version_u}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '{@^[},'}}]}}) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = gettid() r7 = fork() r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = fork() r10 = getpgid(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)=0x0, {0x3b}, &(0x7f0000000200)=""/204, 0xcc, &(0x7f00000003c0)=""/217, &(0x7f0000000180)=[r5, r6, r1, r8, r9, r10, r1], 0x7, {r11}}, 0x58) r13 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x1, 0x2, &(0x7f0000000700)=[{&(0x7f0000000600)="6a93e31ebe48a742be082212307134dc863983d4bf6ef56ecca5babc3f2db404a6583fa44f7bc3266b979e9593e60bfe8c02c99415dafa66d7ba39a12f56d2d007e6109a828e064af3f6b2517f6558eeb2310a968c379b26dbfa6e5c42e747935f8c9f1a40f1fbc9f8ef8a0bfd8593d39b207bda5ab465d6e0df64605debf8ebb2fe5923c268ebbc3faebc6aa9b617a660c2bfc6347638a037d4ce0a93d992fc1c9f28508d82261239e790ad89ef4243e89be31302c758aaf4d4e9c2b95c157985", 0xc1, 0x4}, {&(0x7f0000000380)="f131306f50423cc75b06a0ca133d3f0ad25d1297592134ff78", 0x19, 0xffffffffffffff7f}], 0x800002, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7379735f696d6d757461626c652c7375626a5f757365723d2c736d61636b66736465663d2c7375626a5f757365723d7b405e5b7d2c2c6d6561733372652c7365636c6162b9095679aae02ca7c750efe1ab656c2c686173682c6d6561737572652c686173682c646f6e865f686169643e00000000007fffdff17ae738cb69ff933795d6a8f02517e3035a", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r13, &(0x7f0000000800)={r3, r0, 0x80000001}) r14 = dup3(r13, r2, 0x0) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000840), &(0x7f0000000880)={'U+', 0x6}, 0x16, 0x1) 17:32:03 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x400000) [ 1222.558083] Module has invalid ELF structures 17:32:03 executing program 6 (fault-call:1 fault-nth:9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc01000000000000002000000000000020010000000000000000000000000000000000004e240000020020"], 0xb8}}, 0x0) 17:32:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000"], 0xb8}}, 0x0) [ 1222.624709] FAULT_INJECTION: forcing a failure. [ 1222.624709] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.627298] CPU: 0 PID: 18819 Comm: syz-executor.6 Not tainted 5.10.60 #1 [ 1222.628789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1222.631261] Call Trace: [ 1222.631842] dump_stack+0x107/0x163 [ 1222.632632] should_fail.cold+0x5/0xa [ 1222.633466] ? xfrm_policy_alloc+0x8c/0x410 [ 1222.634407] should_failslab+0x5/0x10 [ 1222.635245] kmem_cache_alloc_trace+0x55/0x350 [ 1222.636240] xfrm_policy_alloc+0x8c/0x410 [ 1222.637142] xfrm_policy_construct+0x2c/0x540 [ 1222.638119] xfrm_add_policy+0x391/0x7a0 [ 1222.639003] ? __update_load_avg_se+0x3f2/0xae0 [ 1222.640033] ? xfrm_policy_construct+0x540/0x540 [ 1222.641067] ? security_capable+0x95/0xc0 [ 1222.641974] ? __nla_parse+0x3e/0x50 [ 1222.642788] ? xfrm_policy_construct+0x540/0x540 [ 1222.643820] xfrm_user_rcv_msg+0x3a5/0x810 [ 1222.644752] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 1222.645843] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1222.646824] ? finish_task_switch+0x126/0x5d0 [ 1222.647819] ? finish_task_switch+0xef/0x5d0 [ 1222.648775] ? __switch_to_asm+0x42/0x70 [ 1222.649685] ? __mutex_lock+0x459/0x12e0 [ 1222.650570] ? xfrm_netlink_rcv+0x5c/0x90 [ 1222.651478] ? __lockdep_reset_lock+0x180/0x180 [ 1222.652498] netlink_rcv_skb+0x14b/0x430 [ 1222.653380] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 1222.654462] ? netlink_ack+0xab0/0xab0 [ 1222.655314] ? lock_release+0x4db/0x6b0 [ 1222.656182] ? netlink_deliver_tap+0x1c3/0xba0 [ 1222.657178] xfrm_netlink_rcv+0x6b/0x90 [ 1222.658043] netlink_unicast+0x53a/0x7e0 [ 1222.658931] ? netlink_attachskb+0x810/0x810 [ 1222.659906] ? _copy_from_iter_full+0x278/0x920 [ 1222.660923] netlink_sendmsg+0x85a/0xd90 [ 1222.661811] ? netlink_unicast+0x7e0/0x7e0 [ 1222.662739] ? netlink_unicast+0x7e0/0x7e0 [ 1222.663668] sock_sendmsg+0x150/0x190 [ 1222.664496] ____sys_sendmsg+0x701/0x860 [ 1222.665405] ? kernel_sendmsg+0x50/0x50 [ 1222.666267] ? __ia32_sys_recvmmsg+0x290/0x290 [ 1222.667279] ? perf_trace_lock+0xb6/0x470 [ 1222.668177] ? hlock_class+0x120/0x120 [ 1222.669022] ___sys_sendmsg+0xff/0x170 [ 1222.669871] ? sendmsg_copy_msghdr+0x160/0x160 [ 1222.670866] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.671899] ? perf_trace_lock+0xb6/0x470 [ 1222.672798] ? __fget_files+0x228/0x410 [ 1222.673659] ? lock_downgrade+0x6d0/0x6d0 [ 1222.674557] ? __lockdep_reset_lock+0x180/0x180 [ 1222.675578] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.676607] ? __fget_files+0x251/0x410 [ 1222.677474] ? __fget_light+0xea/0x280 [ 1222.678320] ? sockfd_lookup_light+0xc6/0x180 [ 1222.679312] __sys_sendmsg+0xe9/0x1b0 [ 1222.680135] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1222.681070] ? rcu_read_lock_any_held+0x5/0x90 [ 1222.682074] ? rcu_read_lock_sched_held+0xd/0x70 [ 1222.683113] do_syscall_64+0x33/0x40 [ 1222.683921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1222.685035] RIP: 0033:0x466609 17:32:03 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780), 0x8, 0x1030c0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000007c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 1222.685737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.689942] RSP: 002b:00007f592d301188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.691609] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 1222.693162] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1222.694715] RBP: 00007f592d3011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1222.696283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1222.697836] R13: 00007ffea443464f R14: 00007f592d301300 R15: 0000000000022000 17:32:03 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x400001) 17:32:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc010000000000000020000000"], 0xb8}}, 0x0) 17:32:03 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x400000) [ 1222.828256] Module has invalid ELF structures VM DIAGNOSIS: 17:31:54 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000010004000 RCX=ffffffff81086a61 RDX=ffff888045413280 RSI=0000000000000008 RDI=ffff888045413280 RBP=ffff888045413280 RSP=ffff88804df97ef0 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816a29c4 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000002112400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c52dd9000 CR3=000000004d03c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000005487a800000000005487a0 XMM02=000000000000000000000000000000ff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffff00ffffffffffffffff XMM05=ffffffffffffff00ffffffffffffffff XMM06=000000000000000000524f5252450040 XMM07=00000000000000000000000000000000 XMM08=5f6d6f6f2f666c65732f636f72702f00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8226b221 RDI=ffffffff876c5000 RBP=ffffffff876c4fc0 RSP=ffff888046cb7660 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000066 R13=0000000000000066 R14=ffffffff876c4fc0 R15=dffffc0000000000 RIP=ffffffff8226b278 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f02a51eb700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce22000 CR3=0000000042f4c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000005487a800000000005487a0 XMM02=000000000000000000000000000000ff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffffff XMM06=000000000000000000524f5252450040 XMM07=00000000000000000000000000000000 XMM08=5f6d6f6f2f666c65732f636f72702f00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000