HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 05:06:49 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x800) 05:06:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @local, 'wlan1\x00'}}, 0x80, 0x0}}], 0x2, 0x0) 05:06:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c20000ff", 0x65, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[]) 05:06:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 05:06:49 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socket(0x0, 0x803, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) close(r2) 05:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) [ 440.877722][T17703] loop2: detected capacity change from 0 to 4 [ 440.887570][T17703] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) 05:06:49 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 440.947710][T17720] tmpfs: Unsupported parameter 'huge' 05:06:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:52 executing program 1: syz_io_uring_setup(0x40003d11, &(0x7f0000000140), &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 05:06:52 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x1650c2, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:06:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/88, 0x58}], 0x1}, 0x7}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) 05:06:52 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:52 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 05:06:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:52 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffff9, 0x693d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x5}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffeae, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000240) 05:06:52 executing program 1: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @remote}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) write$binfmt_elf64(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000000540)=""/205, 0xcd}], 0x9, 0x0, 0xd5) 05:06:52 executing program 4: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x829de39719ecf833, 0x0, 0x0, 0x0, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) unshare(0x22060400) r1 = gettid() wait4(0x0, 0x0, 0xbd85714df77529e4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c49}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 05:06:52 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0x18) 05:06:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:52 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x107040, 0x0) close(r0) 05:06:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="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", 0x125}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:06:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000000010, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)='r', 0x1}, {&(0x7f00000025c0)="8b", 0x1}], 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r1, 0x10000000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) write(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x612}, {0x0, 0x0, 0x10e20}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) 05:06:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:52 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:52 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:06:52 executing program 1: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000940)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) [ 444.020227][T17804] loop1: detected capacity change from 0 to 270 05:06:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x1b}) 05:06:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b41, 0x0) 05:06:53 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x8, 0x0, 0x0) 05:06:53 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x5) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x207, 0x0, 0x0) 05:06:53 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0xfdee}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) 05:06:53 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:55 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x40}, 0x21) 05:06:55 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x15d, 0x0) timer_create(0x0, 0x0, &(0x7f0000000440)) 05:06:55 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:06:55 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x107382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000380)={0x24ae, 0x8, 0x9}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) rt_sigtimedwait(&(0x7f0000000200), 0x0, &(0x7f0000000400), 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x7, 0x3f, 0x8, 0x0, 0x0, 0x39a, 0x7801, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa0, 0x1, 0x0, 0x6000, 0x2, 0x5, 0x4, 0x8000, 0x8, 0x7f}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e"}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x8001, 0x9, 0x0, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f41336de09d52644d882c5", [0x0, 0x64]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 05:06:55 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:55 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:55 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:55 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:55 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) [ 447.200914][T17921] loop7: detected capacity change from 0 to 1036 05:06:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:06:58 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:58 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:06:58 executing program 2: rt_sigaction(0x34, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000180)) 05:06:58 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:06:58 executing program 4: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x19, 0x48082, 0x0, 0x51) sendto$inet(r0, &(0x7f0000000100)="0bff", 0x2, 0x24008084, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001580)="ed8a", 0x2, 0x0, 0x0, 0x0) 05:06:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FITRIM(r0, 0x801c581f, &(0x7f00000001c0)) open(0x0, 0x80, 0x0) 05:06:58 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:06:58 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0xe}, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x40002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 05:06:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x1000000000000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x0) 05:06:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 05:06:58 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:07:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:01 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 05:07:01 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:07:01 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x40) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x181) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4400, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x4, 0x3, 0x1, 0x8001, 0x3, [{0x7, 0xff, 0x800, '\x00', 0x100}, {0x5, 0xfffffffffffffffe, 0x0, '\x00', 0x2}, {0x10001, 0x2, 0xfffffffffffffffb, '\x00', 0x6}]}) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r1, r3, 0x0, 0x800000bf) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c66, 0x8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000020000c49f, 0x800007c, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 05:07:01 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:01 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:01 executing program 1: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:07:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:07:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:07:01 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0xff000000}) 05:07:01 executing program 1: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:07:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) r1 = getpgid(0x0) openat$nvram(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 05:07:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:07:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:07:02 executing program 1: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/225, 0xe1}], 0x1, 0x0, 0x0) 05:07:02 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:02 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) 05:07:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:02 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 05:07:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:02 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 05:07:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b00)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) 05:07:03 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 05:07:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:03 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:03 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:03 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 05:07:05 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:05 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 05:07:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000180)="aefdda9d240800005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}, {&(0x7f00000021c0)="83aa9d626b33b969548457914c28a3da85a6cec04ccd0e5757dfd9a0387a34d1b436e521633d0e3adb1d", 0x2a}], 0x2) 05:07:05 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:05 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='builtin_and_secondary_trusted\x00') add_key$keyring(&(0x7f0000000240), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r0) 05:07:05 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 05:07:05 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:06 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:06 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 05:07:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:07:06 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:06 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 05:07:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 05:07:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:06 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:06 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 05:07:06 executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil) 05:07:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') 05:07:09 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r1, r1}, 0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={'wp512\x00'}}) 05:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:09 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:09 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:09 executing program 1: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0x7f}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80d00, 0x6, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000000002000019000020600100000f2d0000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000cdf4655fddf4655fddf4655f00000000e5c7000008000000100008", 0x23, 0x1600}], 0x81, &(0x7f00000001c0)=ANY=[]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x80004506, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x50, 0xffffffffffffffff, 0x2bf70000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x1, 0x40, 0x0, 0x1, 0x400, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb0a, 0x1, @perf_config_ext={0x3, 0xffffffffffffffc1}, 0x44c45, 0xffffffff, 0x7, 0x7, 0x8, 0xa38b, 0x7, 0x0, 0x40, 0x0, 0x6}, r0, 0xffffffffffffffff, r1, 0x2) 05:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386191c7aee3115ef0441c40671bec467d4182e6eb56585656007a1062c4b64862cff00b41e1855ef88b9bbcea40f6c48488c0762237c7af3ebec1a3384b97d5b84e2564247c640452e435ddb10", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:09 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) [ 460.948841][T18255] loop1: detected capacity change from 0 to 1030 [ 460.984141][T18255] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 05:07:09 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af7312"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:09 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:09 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 461.015876][T18255] EXT4-fs (loop1): orphan cleanup on readonly fs [ 461.029159][T18255] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 461.046691][T18255] EXT4-fs error (device loop1): ext4_quota_enable:6405: comm syz-executor.1: Bad quota inode # 3 05:07:09 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) [ 461.057848][T18255] EXT4-fs warning (device loop1): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 461.072702][T18255] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 461.079601][T18255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 05:07:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) 05:07:09 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:09 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:12 executing program 4: unshare(0x2a000400) unshare(0x20000200) 05:07:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 05:07:12 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:12 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:12 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1, 'dh\x00'}, 0x2c) 05:07:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x4b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8234a36b2b7ef5f1dc0d262d8661cf77ed967b"}) 05:07:12 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r1, r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:12 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000440)={0x50020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:07:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 05:07:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x202002) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x2, 0x20000000, 0x0, 0x0) 05:07:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:15 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:15 executing program 1: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000002c0), 0x8001, 0x0) 05:07:15 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setreuid(0xee00, 0x0) setreuid(r2, r2) 05:07:15 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:15 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:15 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'vlan0\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) sendmsg$netlink(r3, 0x0, 0x20004000) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c6827069e6f054f5cd6b16b537da1010200000000000000000000000708fd034000000014bffc8f309cfb350d208126c3161ea6f8383918fcbd01710dcd9e36f9f7f2cd4de01389ed1733625bfbfffffffffffffff149d3dde15b21e8acf952aa4e591b518277"], 0x28}}, 0x40) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x810ee0f, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@empty, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x10, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}) write(r4, &(0x7f0000000140)="3e312c200ddc2add3b3fa61d42180008c5e7441efdd6cfa2087f6f032ff7eb5847bb5f28464d88f6dfaf12184fa42f728ed64591c857e97ed204054448d81e7b18dd18f89e9a107641529c37d18a68e6ba7d27bc8e925ce5e0d1395a6ba26a126838498c4419fb5bda0f9742825cbbe49aecb5013f98ecfb6fc9e30f19dbba0aa68a88b7baf573a0b4a61e03a7de64fe3ba762b81d87bc4a8a4d41d8d6214d9c7350176dd6ae045f51668e8f7850d1d63281a0e99c1ccb1c57eff725640f48bec38027b258e12a204a8568d04e833bc33de03e4d194e452ea01826", 0xdb) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl(r0, 0x8936, &(0x7f0000000000)) pipe(0x0) 05:07:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) dup3(r1, r2, 0x0) 05:07:15 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) close(0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) gettid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x0) open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x2}, 0x20) 05:07:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001a00)=""/4072, 0xfe8}], 0x1) mkdir(&(0x7f0000001780)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfbfffffffffffffd]}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f0000000100)='./control\x00', 0xe4000c64) open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) 05:07:16 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:16 executing program 2: socket(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 05:07:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000014c0)="9c514b085eed33163a582b74118144681d65b050daf27da27ef050eb260f4377841639a86f1b2cd35fabad9199d27f183025256a0450769fab1da924263e946687ab714ea2f5bddd5859a9659f859a78fd2be3e27cf0a2fb9ee62773377fc9b1e92d5365db563ae5361b7dd6d1108585aaf4f9915854f3514fc67f005f675b1acf8688fd89d3ddb9274ba48ff8c14051a7009b524b1809", 0x97}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x37, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:07:16 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:18 executing program 2: socket(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000280)) 05:07:18 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:18 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0xa8, 0x700}}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4842c620f6e25df4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x5, 0xfffffffc, 0x8, 0x200, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 05:07:18 executing program 2: socket(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:18 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 05:07:19 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:19 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 05:07:19 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:21 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x1204718dbe5e1698, 0xffffffffffffffff}) 05:07:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:21 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240), &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 05:07:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:22 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:22 executing program 4: memfd_create(&(0x7f0000000200)='G\x84\xe7R\xb5\xbc\xeal\x01\x86\x01\xff\xff\xff\xff\x00\x00\x00\x00\x1bX\x93\xbbqz\x01o\x81\xa6\x02Wq\x8c\xbfx\xdd\xd4\xf1\aQu8\x99:\x06\xb9\xbe\f&Ws\x83\xd6&s3\v7n0Oj\xff0\xea(\xeb\x986\x14\a\x95:\xeb\xf9A\xfb\x13k\xed{\xed*\xa5p37m\xa8\xa7\x95&\xb0\x93p\xa3\xa7\xda\xf2H\x9f\xf5D\xae\b\x81=\xdb]\xcb\x10\xb7\x89\x8e\x8a\x9a\x80^k\xc9t\x1c\x00\x1a\x1d.\xe5\x18I\aRW\x99\x1f\xb1#\x1efv\xb7\xe8\x01\x03\t\b\x95\xa9Q\x8a\xe2\xbeq\x1e=\xebh\xd1S\x18\xff\xb7\xae\x9c\x9d#\xf7o\xcf\xf3\xeb@\x97\xdc\x9c\r0\xe4^f\xf59g\xa0\xe5\xe4\x1bN\xc6\xff7\xb3\x10\'\xc0\x04\xd5\xef\a70\x8e\xfb\x1e\x15\v\x12Ms7\x03\xa4\xbfv\xaf\xf8\x13F!\x17c\xde$\x1de(\xfb)\xc9\xaam\xad\xda\x03\x16.\xdb,\x86E~gO {J\x17*\x8bX\xb4/\xf9\xa6\xea\x9c\x12\x01\x91\x16\xff}\xa4\x95s\x87vH\xd8f\x01\x1f\xde\x8d0\"\xa3jM\xbb\xd65\xc2\n\x90\xdbP\xe8\xb1\xec\xd4\b\xba\x83\xd1)\x95\x06\xb9\xc1\xd3', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 05:07:22 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r2, 0xa50105c306cc333b}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000500)=""/59, 0x3b}], 0x2}}], 0x1, 0x0, 0x0) 05:07:24 executing program 2: socket(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:24 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:24 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:24 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:24 executing program 2: socket(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:25 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:25 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:25 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:25 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:25 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x0) 05:07:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:27 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2b030000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)) pipe(0x0) gettid() r0 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = mq_open(&(0x7f0000000040)='$/{&(o&\\\x00', 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, 0x0) getpgrp(r0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) 05:07:27 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:27 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:27 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) [ 479.276358][T18698] loop4: detected capacity change from 0 to 264192 05:07:27 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:28 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 479.319141][T18698] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 479.329261][T18698] EXT4-fs warning (device loop4): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 05:07:28 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:28 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 479.401614][T18698] EXT4-fs (loop4): mount failed [ 479.464059][T18698] loop4: detected capacity change from 0 to 264192 05:07:30 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:30 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:30 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2b030000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)) pipe(0x0) gettid() r0 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = mq_open(&(0x7f0000000040)='$/{&(o&\\\x00', 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, 0x0) getpgrp(r0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) 05:07:30 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:30 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:31 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 482.307376][T18765] loop4: detected capacity change from 0 to 264192 05:07:31 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [ 482.360964][T18765] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 482.388860][T18765] EXT4-fs warning (device loop4): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 05:07:31 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 482.450017][T18765] EXT4-fs (loop4): mount failed 05:07:33 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:33 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 05:07:33 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe1"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:34 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:07:34 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:34 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) [ 485.377801][T18825] loop4: detected capacity change from 0 to 1 05:07:34 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) [ 485.434638][T18825] loop4: p2 < > p3 p4 [ 485.439515][T18825] loop4: p2 size 2 extends beyond EOD, truncated [ 485.448259][T18825] loop4: p3 start 225 is beyond EOD, truncated [ 485.454620][T18825] loop4: p4 size 3657465856 extends beyond EOD, truncated 05:07:34 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 05:07:37 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 05:07:37 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccc"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:37 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:37 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 05:07:37 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 488.390665][T18883] loop4: detected capacity change from 0 to 1 05:07:37 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) rename(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 05:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 05:07:37 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) [ 488.434842][T18883] loop4: p2 < > p3 p4 [ 488.440452][T18883] loop4: p2 size 2 extends beyond EOD, truncated [ 488.458897][T18883] loop4: p3 start 225 is beyond EOD, truncated [ 488.465238][T18883] loop4: p4 size 3657465856 extends beyond EOD, truncated 05:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 05:07:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:40 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccc"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}]}, 0x10) 05:07:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x1000]}, 0x8, 0x81000) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/', [{0x20, '@$:/}--\x9a'}, {}, {}, {0x20, '['}, {0x20, ')\xc3+'}], 0xa, "ed04123d087176cfa324d3517da6fff9df5f2e86656dc3c8eee9"}, 0x7c) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x3, 0xf, 0x101, 0x0, 0x1, 0x7, 0x0, 0x7fffffff, 0x1ff}, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x3fd, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a7, 0x400}, 0x0) open$dir(0x0, 0x0, 0x8) 05:07:40 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r1, 0x5609, 0xfffffffffffffffd) 05:07:40 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}]}, 0x10) 05:07:40 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r1, 0x5609, 0xfffffffffffffffd) 05:07:40 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}]}, 0x10) 05:07:40 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r1, 0x5609, 0xfffffffffffffffd) 05:07:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {}]}, 0x10) 05:07:43 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:43 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:43 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r1, 0x5609, 0xfffffffffffffffd) 05:07:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {}]}, 0x10) 05:07:43 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff020}, {}]}, 0x10) 05:07:43 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:43 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 05:07:46 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:46 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2}) 05:07:46 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:46 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:46 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:46 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 05:07:46 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, 0x0) 05:07:46 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 05:07:46 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:46 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, 0x0) 05:07:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:49 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:49 executing program 2: socket(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$join(0x1, 0x0) 05:07:49 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:49 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:49 executing program 2: clock_nanosleep(0x5247c199b067e872, 0x0, &(0x7f0000001ac0)={0x0, 0x989680}, 0x0) 05:07:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r1, 0x5609, 0xfffffffffffffffd) 05:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 05:07:49 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000640), 0x4, 0x0) 05:07:49 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:52 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}, 0x10) 05:07:52 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 05:07:52 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) ioctl$TCSETA(r0, 0x5609, 0xfffffffffffffffd) 05:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}, 0x10) 05:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}, 0x10) 05:07:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:52 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0x0, 0x0) 05:07:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) writev(r0, &(0x7f0000000080), 0x5b) 05:07:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TCSETA(0xffffffffffffffff, 0x5609, 0xfffffffffffffffd) 05:07:55 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:55 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:55 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000039001901120006000000000002"], 0x30}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 05:07:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0xc0189436, 0x2070e008) 05:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:07:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b65", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:07:55 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:55 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/257, 0x101) r2 = epoll_create1(0x0) dup2(r2, r1) tkill(r0, 0x7) 05:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:07:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd633432", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:07:58 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=xen,', {[{@cache_fscache}]}}) 05:07:58 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:07:58 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r2, 0xb) 05:07:58 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setns(0xffffffffffffffff, 0x40000000) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2, 0x14, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x2}) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, &(0x7f0000000680)='/}(+/+\x00', 0x0], 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 05:07:58 executing program 2: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x5f, "20d2c8abb47dc5a3b4856bacf9069ced17c2b81749f23117c1374afeb6d86a5628d19fc1c4eb60c2a4bff90ef15f85fd4fb5ef41f7aa9a2463fa2d9d2cf3ea4cc47b43b2cb11ddfa2eae8acf6a077d214c5557769cb9b938bf96d5dbca529a"}, &(0x7f0000000100)=0x83) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2c04330050800000ffffffffffff080211000001505050505050"], 0x448}}, 0x0) 05:07:58 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) [ 509.566829][T19261] 9pnet: Could not find request transport: xen [ 509.605579][T19270] 9pnet: Could not find request transport: xen 05:07:58 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x1a39a0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 05:07:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 05:07:58 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd633432", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 05:08:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1, 0x200, 0x0) 05:08:01 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:01 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd633432", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1, 0x200, 0x0) 05:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0x7ffff000, 0x40080, 0x0, 0x1f4) 05:08:01 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:01 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 05:08:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 512.731507][ T26] audit: type=1400 audit(1619240881.379:39955): avc: denied { create } for pid=19345 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 05:08:02 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d3", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:04 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 05:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:04 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:04 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:04 executing program 1: memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xa2) getresgid(0x0, &(0x7f00000011c0)=0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000002240)={0x2, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x401, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x1]}, 0x8) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x8365, r1, 0x0, 0x0, 0x3}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d80)}], 0x1}, {&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002480)=[{0x0}, {&(0x7f0000001200)}, {0x0}, {&(0x7f0000001480)}], 0x4}], 0x2, 0x20004001) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', 0x0, 0x3c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xc5d, 0x0) getgroups(0x4, &(0x7f0000001200)=[r0, 0x0, 0xee01, 0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0xc001, 0x0) 05:08:04 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 515.679957][T19396] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 05:08:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:04 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 515.752472][T19408] loop1: detected capacity change from 0 to 512 [ 515.797040][T19408] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 05:08:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d3", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:07 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:07 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:07 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe2(0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x13, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x0) 05:08:07 executing program 1: socket(0x2c, 0x3, 0x6) 05:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x4, 0xffffffe0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x7800, 0x100, 0x8000}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@loopback, 0x4e23, 0x9, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x3c, r1, 0xffffffffffffffff}, {0x0, 0x513, 0x1, 0x58, 0xc0c3, 0x9, 0x0, 0x9}, {0x100000000, 0x3, 0x5, 0xd1}, 0x6a7a, 0x6e6bb5, 0x0, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x3502, 0x4, 0x3, 0x1f, 0x400, 0x3f, 0x4}}, 0xe8) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x58cd}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) clone(0x80080200, &(0x7f0000000380)="0066085ad6477fd8fa3add8d50adc5e344409af5d3f5b34ad3ead7205f337ade7e9e1fd8d6bfe30a806a3fd12cc480bf132cff2d636e2bec5e9cad770e9d2066e5a0b67efab6eaec93008310b5f0e3326d8aaf100f34b83f24f718b1521b359f7ad83e9ad230f9af3f83762eb4371942e90148037912d223640e1563c171b2e9592b1c38471099c04e68d337525920379a4342a34ad4aac6bf4f1d4a4b950a3b9ba60d4357a889a8e69e516fb4b4adfede1b85058ee0631db56cad96f842da92e96caffe3e8b8031ce781330c39d35d986dbd5", &(0x7f0000000140), &(0x7f0000000480), &(0x7f00000004c0)="6b40ea36cc21fcd7c9a9b230e6fb6a605062349ac2aed013ddb8b601b6c41fc56857d703b85e321f8333c25d4f7e9d6d6b71036a16f41c0e08ffc4a141bcc0") 05:08:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d3", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b20778cb2e5bcf97c4c73ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296d588ee40d58160fa80f4e9461103fa13cdce25381a61500f763b300ac9c3b764", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:08:10 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:10 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000300)="00000000000000000000000000000000000000000000000000000000000055aaf8", 0x21, 0x1e4}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45", 0x44, 0x600}, {&(0x7f0000000780)="2ebc9c5d9d2020202020201000ace67032513251000066703251030000000000", 0x20, 0x1000}], 0x0, &(0x7f0000010d00)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080)=0x3e00000000, r1, &(0x7f00000000c0)=0x5, 0x100, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) 05:08:10 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000300)="00000000000000000000000000000000000000000000000000000000000055aaf8", 0x21, 0x1e4}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45", 0x44, 0x600}, {&(0x7f0000000780)="2ebc9c5d9d2020202020201000ace67032513251000066703251030000000000", 0x20, 0x1000}], 0x0, &(0x7f0000010d00)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080)=0x3e00000000, r1, &(0x7f00000000c0)=0x5, 0x100, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) 05:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 521.787715][T19505] loop1: detected capacity change from 0 to 16 [ 521.867659][T19521] loop1: detected capacity change from 0 to 16 05:08:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:13 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') lseek(r0, 0x100000001, 0x0) 05:08:13 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:13 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000003340)=[{&(0x7f0000000080)=""/200, 0xc8}], 0x1, 0x3, 0x0) 05:08:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:13 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x88, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) setuid(0x0) getgroups(0x0, &(0x7f0000000500)) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) pipe(0x0) 05:08:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:13 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:16 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, 0x0) 05:08:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:16 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:16 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:16 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:08:16 executing program 2: mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30132}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000040)=""/61) unlink(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000080)='.\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x82) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) syz_io_uring_setup(0x89, &(0x7f0000000200), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13}, 0xadfa) creat(&(0x7f0000000000)='./file0\x00', 0x70) unlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 05:08:16 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 05:08:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:19 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000140)) 05:08:19 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:19 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 05:08:19 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0xc0ed0000, &(0x7f0000000080)) 05:08:19 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x0, &(0x7f00000004c0)=""/67, 0x43) [ 530.835292][T19655] loop1: detected capacity change from 0 to 264192 05:08:19 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x0, &(0x7f00000004c0)=""/67, 0x43) 05:08:19 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x7}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) epoll_create(0x400) syz_open_dev$ptys(0xc, 0x3, 0x0) sendto$inet(r2, 0x0, 0x0, 0xaad57c81b7a27570, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 530.880357][T19655] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 05:08:19 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x14, r1, 0xf4a1d816eacc9bd7}, 0x14}}, 0x0) 05:08:19 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x0, &(0x7f00000004c0)=""/67, 0x43) 05:08:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) 05:08:22 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, 0x0, 0x0) 05:08:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) 05:08:22 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f23", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:22 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:22 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, 0x0, 0x0) 05:08:22 executing program 1: clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 05:08:22 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, 0x0, 0x0) 05:08:22 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) open(0x0, 0x0, 0x0) 05:08:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 05:08:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:08:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0x8b000}], 0x0, &(0x7f0000000440)={[{@overriderock}]}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 05:08:25 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f23", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:25 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 05:08:25 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:25 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) open(0x0, 0x0, 0x0) 05:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:25 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x8000103, 0x2) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x2000) 05:08:25 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) open(0x0, 0x0, 0x0) 05:08:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:25 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) [ 536.971905][T19791] tmpfs: Unsupported parameter 'huge' [ 536.981467][T19791] tmpfs: Unsupported parameter 'huge' 05:08:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f23", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x34}}, 0x0) 05:08:28 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) open(0x0, 0x0, 0x0) 05:08:28 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:28 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:28 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:28 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:28 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240800005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 05:08:28 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:28 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:28 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x12, &(0x7f0000000580), 0x0, &(0x7f0000000640)={[{@fat=@umask}, {@fat=@dmask}, {@fat=@errors_remount}, {@fat=@fmask}]}) 05:08:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:31 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:31 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) [ 542.980527][T19877] FAT-fs (loop1): bogus number of reserved sectors [ 542.987868][T19877] FAT-fs (loop1): Can't find a valid FAT filesystem 05:08:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:31 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:34 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:34 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:34 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:34 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl(r0, 0x0, 0x0) 05:08:34 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:34 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:34 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x5460, 0x0) 05:08:34 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:34 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 05:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:37 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:37 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}}, 0x0) 05:08:37 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:37 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r2) 05:08:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:37 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x82ca64b63d118a7, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x4b}]}, 0x34}}, 0x0) 05:08:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 05:08:40 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1d8, 0xdf, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 05:08:40 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:40 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x0) 05:08:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:43 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:43 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x40, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x40}}, 0x0) 05:08:43 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:43 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:43 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r0, @ANYBLOB="db6a25bd7000fbdbdf25200000000c00060002000000000000000c002280080002000100000008000300", @ANYRES32=r3, @ANYBLOB="1c0022800800020001000000080002000100000005000400010000000c00060002000000000000000c00060001000000010000004c00228008000200010000000800020000000000050001"], 0xc0}}, 0x0) 05:08:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x7c8}) 05:08:43 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 05:08:43 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:46 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:46 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001a40)={&(0x7f0000000000), 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 05:08:46 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 05:08:46 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:46 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:46 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 05:08:46 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:46 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7c8}) 05:08:46 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:46 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 558.184616][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.221866][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:49 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7c8}) 05:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:49 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7c8}) 05:08:49 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 561.123218][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81}) 05:08:49 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81}) [ 561.195107][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.259336][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:52 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000003240), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x109201) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x81}) 05:08:52 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:52 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:52 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3040000", @ANYRES16=r4, @ANYBLOB="ff8305000000000000bd", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 05:08:52 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:52 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:55 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) 05:08:55 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x4, 'syz0\x00'}]}]}, 0x24}}, 0x0) 05:08:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:55 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:55 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 567.292209][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x2275, 0x7fffffffefff) 05:08:58 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:58 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 570.191401][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:58 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:58 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 05:08:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 570.285377][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:59 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}}, 0x0) 05:08:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f00000002c0)="03aef73e41e071f77d69123b1e77e7ee868fd1000000000000000000000028db8e4cbcedd94bef8721094263d1b725a2e2d3e949ec8de5cb2f", 0x39, 0x640}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) [ 570.386971][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:08:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, &(0x7f0000000380)="ba", 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) [ 570.471946][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 570.573982][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 05:08:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:59 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffa}) 05:08:59 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:08:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:08:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}, {}], 0x45, 0x0, 0x0, 0x0) 05:08:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x3c}}, 0x0) 05:08:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 570.687518][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:08:59 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) [ 570.779451][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:02 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:02 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x3}, 0x80, 0x0}}], 0xce51a42b8b22e007, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 05:09:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 05:09:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 05:09:02 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 05:09:02 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 573.533892][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.568297][T20474] 9pnet: Insufficient options for proto=fd 05:09:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000780)={&(0x7f0000000380), 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x2f4, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x14c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0x138, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0x1a}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER]}]}, 0x2f4}}, 0x0) 05:09:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 05:09:02 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 05:09:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}}, 0x0) [ 573.634906][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:05 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4d, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 05:09:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r1, 0xdb78f88fa66af731, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x2}]}]}, 0x20}}, 0x0) 05:09:05 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 05:09:05 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) ioctl$TCXONC(r1, 0x540a, 0x3) 05:09:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0xe2e3c8303747ca3f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}}, 0x0) 05:09:05 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 576.594178][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 05:09:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:05 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 576.645095][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x1e00, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0x6, 0x2, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x0) [ 576.688345][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:08 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:08 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:08 executing program 0: setresuid(0xee01, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = getuid() keyctl$chown(0x4, r0, r1, 0xffffffffffffffff) 05:09:08 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 05:09:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000057c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@hopopts={{0x18, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 05:09:08 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) [ 579.617999][T20595] tmpfs: Bad value for 'gid' [ 579.625821][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:08 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 579.662432][T20606] tmpfs: Bad value for 'gid' 05:09:08 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:08 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) 05:09:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 579.689059][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 579.727163][T20620] tmpfs: Bad value for 'gid' 05:09:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:11 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}}, 0x0) 05:09:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:11 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:11 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 582.637780][T20639] tmpfs: Bad value for 'gid' 05:09:11 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 582.689644][T20656] tmpfs: Unknown parameter '/' 05:09:11 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 582.725928][T20663] tmpfs: Unknown parameter '/' 05:09:11 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 582.757686][T20668] tmpfs: Bad value for 'mpol' [ 582.765214][T20670] tmpfs: Unknown parameter '/' [ 582.786560][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:14 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:14 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:14 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 585.655718][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.661533][T20705] tmpfs: Bad value for 'mpol' [ 585.671410][T20706] tmpfs: Bad value for 'gid' 05:09:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:14 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 585.733091][T20715] tmpfs: Bad value for 'mpol' [ 585.738764][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.753189][T20717] tmpfs: Bad value for 'gid' 05:09:14 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) [ 585.786107][T20726] tmpfs: Bad value for 'mpol' [ 585.798233][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.808375][T20729] tmpfs: Bad value for 'gid' 05:09:17 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:17 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) [ 588.686305][T20747] tmpfs: Bad value for 'mpol' 05:09:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) [ 588.720608][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:17 executing program 2: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 588.774253][T20765] tmpfs: Bad value for 'mpol' [ 588.814326][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 588.823051][T20777] tmpfs: Bad value for 'mpol' 05:09:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:20 executing program 2: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:20 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:20 executing program 2: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:20 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 591.729156][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.737930][T20796] tmpfs: Bad value for 'mpol' 05:09:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 591.785026][T20810] tmpfs: Bad value for 'gid' 05:09:20 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 591.814102][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.830313][T20816] tmpfs: Bad value for 'mpol' [ 591.864637][T20822] tmpfs: Bad value for 'gid' [ 591.870709][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:23 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:23 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:23 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:23 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:23 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:23 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) [ 594.761706][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.763272][T20844] tmpfs: Bad value for 'mpol' [ 594.788640][T20848] tmpfs: Bad value for 'gid' [ 594.841663][T20856] tmpfs: Bad value for 'mpol' 05:09:23 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:23 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:23 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 594.867253][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.882639][T20862] tmpfs: Unknown parameter '/' [ 594.902646][T20871] tmpfs: Bad value for 'mpol' 05:09:23 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:23 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 594.921743][T20874] tmpfs: Unknown parameter '/' 05:09:23 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) [ 594.959319][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.984520][T20884] tmpfs: Unknown parameter '/' [ 594.988371][T20887] tmpfs: Bad value for 'mpol' [ 595.034252][T20892] tmpfs: Unknown parameter '/' 05:09:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 05:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 595.610627][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:26 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:26 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:26 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:26 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:26 executing program 4: r0 = add_key$keyring(&(0x7f0000000400), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='.}$\'(\x00', r0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)=')./.%%*s\x00', 0x0) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0x0) [ 597.846249][T20916] tmpfs: Bad value for 'mpol' [ 597.872356][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:09:26 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:26 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:26 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 597.897747][T20925] tmpfs: Unknown parameter '/' 05:09:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 597.939348][T20938] tmpfs: Bad value for 'mpol' 05:09:26 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:26 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 597.959908][T20940] tmpfs: Unknown parameter '/' [ 597.973256][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 597.995335][T20948] tmpfs: Bad value for 'mpol' 05:09:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000080)={'filter\x00', 0x1002, 0x4, 0x3e0, 0x0, 0x110, 0x110, 0x2f8, 0x110, 0x2f8, 0x4, 0x0, {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="33432ac6fc1e", @mac=@link_local, @remote, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@arp={@rand_addr, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 05:09:29 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:29 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:29 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x930, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, &(0x7f0000000080)={0x9}, 0x0, 0x0) 05:09:29 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 600.912898][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.915520][T20972] tmpfs: Unknown parameter '/' 05:09:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x44}}, 0x0) 05:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 601.010031][T20989] tmpfs: Unknown parameter '/' [ 601.038907][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 601.040516][T20998] tmpfs: Bad value for 'mpol' 05:09:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) timer_create(0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:09:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:32 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:32 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8102, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'decodes', ' ', 'io+mem'}, 0xf) 05:09:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 603.924853][T21017] tmpfs: Unknown parameter '/' [ 603.930379][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.930886][T21021] tmpfs: Bad value for 'mpol' 05:09:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 603.987459][T21034] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 604.008464][T21038] tmpfs: Bad value for 'mpol' [ 604.062410][T21051] tmpfs: Bad value for 'mpol' 05:09:35 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) 05:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:35 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:35 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:35 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) 05:09:35 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}], [], 0x2f}) 05:09:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 606.951330][T21070] tmpfs: Bad value for 'mpol' 05:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:35 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 05:09:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) [ 607.034569][T21088] tmpfs: Bad value for 'mpol' 05:09:35 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 05:09:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:35 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 607.126212][T21108] tmpfs: Bad value for 'mpol' 05:09:38 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 05:09:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) 05:09:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:38 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:38 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[], [], 0x2f}) 05:09:38 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) [ 609.987513][T21137] tmpfs: Bad value for 'mpol' 05:09:38 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[], [], 0x2f}) 05:09:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 610.020014][T21143] tmpfs: Unknown parameter '/' 05:09:38 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) [ 610.083598][T21155] tmpfs: Bad value for 'mpol' [ 610.095498][T21157] tmpfs: Unknown parameter '/' 05:09:41 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:41 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[], [], 0x2f}) 05:09:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:41 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) 05:09:41 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:41 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) [ 613.009610][T21184] tmpfs: Unknown parameter '/' [ 613.015921][T21186] tmpfs: Bad value for 'mpol' 05:09:41 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) 05:09:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 613.054318][T21194] tmpfs: Unknown parameter '/' 05:09:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 613.110710][T21204] tmpfs: Bad value for 'mpol' [ 613.136088][T21206] tmpfs: Unknown parameter '/' 05:09:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) 05:09:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:44 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@gid}], [], 0x2f}) 05:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:09:44 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 616.022257][T21227] tmpfs: Bad value for 'mpol' 05:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:09:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0xfffffffffffffffc) [ 616.050238][T21229] tmpfs: Unknown parameter '/' 05:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:09:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 616.099024][T21243] tmpfs: Bad value for 'mpol' 05:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:44 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:09:44 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 616.182806][T21260] tmpfs: Bad value for 'mpol' 05:09:44 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) [ 616.236494][T21274] tmpfs: Bad value for 'mpol' 05:09:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:45 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x542e, 0xfffffffffffffffc) 05:09:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:47 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:09:47 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0x0) 05:09:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0x0) 05:09:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x542e, 0x0) 05:09:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:50 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36", @ANYRESDEC]) 05:09:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 05:09:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:09:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:09:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4, 0x2a, [@random={0x0, 0x6, 'abcdef'}]}]}, 0x28}}, 0x0) 05:09:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x8a55ab6957e87011, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}]}, 0x4c}}, 0x0) 05:09:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:09:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 05:09:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x4}]}, 0x24}}, 0x0) 05:09:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 05:09:53 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:09:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 05:09:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000580)="50250c6c5b19c888ecaf9f42db63af311f2a7d697fd34792a9f8da6f9000ba8829fc6c48af890d4049de360761502c8e7ec76b324e07d0a64373181ca3509d786c1af841cd040cc28a5efdf8324d768a103ea4a673ad165562ebe40070016e943a2dca3dd6598130dc7a5f93871748f0d962d6d05644d40b8260d15edfb4b7c90ae88933013b64eece28862994800c89fc2406a1e4f96d6673be5b4f3bc00a7c7c879a16d9a978ee90f0655140e655945fc4815460cdeb5c87d29ab04731b9008f2b6e8a869783bc6fc48f44d8be", 0xce, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r3, r2}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={'md4-generic\x00'}}) 05:09:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:09:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 05:09:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36"]) 05:09:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 05:09:53 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580), 0x4) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 05:09:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 05:09:54 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 625.317113][T21430] tmpfs: Bad value for 'mpol' 05:09:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 05:09:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36"]) 05:09:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1}, 0x20) 05:09:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 05:09:56 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 05:09:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}]}, 0x24}}, 0x0) 05:09:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a36"]) 05:09:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 628.253173][T21461] tmpfs: Bad value for 'mpol' 05:09:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}]}, 0x24}}, 0x0) [ 628.306734][T21471] tmpfs: Bad value for 'mpol' 05:09:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC]) 05:09:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 628.378409][T21488] tmpfs: Unknown parameter '18446744073709551615' 05:09:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 05:09:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}]}, 0x24}}, 0x0) 05:09:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:09:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC]) 05:09:59 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:09:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 05:09:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0x0, 0x3, 'abc'}]}]}, 0x28}}, 0x0) 05:10:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC]) [ 631.281240][T21505] tmpfs: Unknown parameter '18446744073709551615' 05:10:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:10:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0x0, 0x3, 'abc'}]}]}, 0x28}}, 0x0) 05:10:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:00 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) [ 631.382674][T21522] tmpfs: Unknown parameter '18446744073709551615' 05:10:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 05:10:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC]) 05:10:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0x0, 0x3, 'abc'}]}]}, 0x28}}, 0x0) 05:10:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:02 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:02 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 05:10:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@random={0x0, 0x5, 'abcde'}]}]}, 0x28}}, 0x0) 05:10:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC]) 05:10:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@random={0x0, 0x5, 'abcde'}]}]}, 0x28}}, 0x0) [ 634.299847][T21556] tmpfs: Unknown parameter '18446744073709551615' 05:10:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@random={0x0, 0x5, 'abcde'}]}]}, 0x28}}, 0x0) 05:10:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC]) [ 634.382786][T21569] tmpfs: Unknown parameter '18446744073709551615' [ 634.418060][T21583] tmpfs: Unknown parameter '18446744073709551615' 05:10:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 05:10:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:10:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',mpol=local=s', @ANYRESDEC]) 05:10:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:05 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 05:10:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',mpol=local=s', @ANYRESDEC]) [ 637.322488][T21601] tmpfs: Bad value for 'mpol' 05:10:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:06 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 05:10:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',mpol=local=s', @ANYRESDEC]) [ 637.399367][T21618] tmpfs: Bad value for 'mpol' 05:10:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) [ 637.459522][T21635] tmpfs: Bad value for 'mpol' 05:10:08 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:10:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}}, 0x0) 05:10:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a1", @ANYRESDEC]) 05:10:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:08 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x0, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:08 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:09 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a1", @ANYRESDEC]) [ 640.369944][T21659] tmpfs: Bad value for 'mpol' 05:10:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x6c, r2, 0xa84e6e3e4d344df5, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) 05:10:09 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a1", @ANYRESDEC]) [ 640.444514][T21672] tmpfs: Bad value for 'mpol' 05:10:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x148, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7d, 0x0, "25f11e2e208662a25efe6a68ad80e6dc8f0faf9871d702b9b5b5f00127b8ce4b01856436c366501ea8324a5cf5dfc842264ccf494d47cbc4e12b166f84671675c19721d9ba6ed102fb83ea5af40b2f6f7dcec3c0324dd2277d46b3f8d63a15ded77a9499022d83ab59135db09f6ebd05163620e366bc68b964"}, @NL80211_BAND_2GHZ={0x96, 0x0, "f4ddd349f725787c31be15c3f0accca1c019bcd453e80b9858c9bb92ee7693e84584ef10059caa51d9224f6aebad2861115704c91e60ae1bc3ea295f506bbb737373958cbc640ad6531d9d935580040413af169f335360e9cf0427e8882b46aba01586b8ef7905dfcc6eb5be71f66e3ff6ff8c6103c3901d38d9e3a2eba3103ee4244b649085f5cb92aabe07e132748dae62"}]}]}, 0x148}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200100000000000000080211"], 0x2f0}}, 0x0) [ 640.494104][T21686] tmpfs: Bad value for 'mpol' 05:10:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="66530700ae897094d2f000010000000000002829a773c0c9605aa0bba5fd63343239d4a279d31a0c5f2386", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 05:10:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c", @ANYRESDEC]) 05:10:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000c00)={[{@fat=@usefree}, {@fat=@fmask={'fmask', 0x3d, 0x1000000000000000}}]}) 05:10:12 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x0, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:12 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) [ 643.401252][T21718] tmpfs: Bad value for 'mpol' 05:10:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c", @ANYRESDEC]) 05:10:12 executing program 1: unshare(0x20600) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 05:10:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c", @ANYRESDEC]) [ 643.471354][T21734] tmpfs: Bad value for 'mpol' [ 643.522226][T21747] tmpfs: Bad value for 'mpol' 05:10:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:15 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x0, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a", @ANYRESDEC]) 05:10:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 05:10:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c04, 0x0) 05:10:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) [ 646.393705][T21762] tmpfs: Bad value for 'mpol' 05:10:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a", @ANYRESDEC]) 05:10:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000340)="e3", 0x1, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000180)={[{@fat=@codepage={'codepage', 0x3d, '775'}}]}) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) 05:10:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 05:10:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c6d706f6c3d6c6f63616c3d7374617469c9a14eb50c633a", @ANYRESDEC]) [ 646.495295][T21780] tmpfs: Bad value for 'mpol' [ 646.500206][T21784] loop3: detected capacity change from 0 to 270 [ 646.523770][T21784] FAT-fs (loop3): codepage cp775 not found [ 646.542866][T21797] tmpfs: Bad value for 'mpol' 05:10:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:15 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x0, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:15 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3014034, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 05:10:15 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0x80000000}) 05:10:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)={[{@sb, 0x22}]}) 05:10:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 05:10:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@mcast1]}}}], 0x28}, 0x0) [ 647.314369][T21821] EXT4-fs: Invalid sb specification: sb=0x0000000000000000",errors=continue 05:10:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200108020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000011200)) 05:10:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) [ 647.359455][T21821] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 647.439505][T21821] EXT4-fs: Invalid sb specification: sb=0x0000000000000000",errors=continue [ 647.450167][T21821] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 05:10:16 executing program 0: setreuid(0x0, 0xee00) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c, 0x0) 05:10:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}}, 0x0) 05:10:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:16 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x0, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 05:10:16 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368657461673d803466ae957509fd3203a161bdac73f21f"]) 05:10:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:16 executing program 1: unshare(0x40400) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "79482bae330e385b07052fd4407ba3bc17fd8515d8f01b614de6393bca910df32e11121e7ea87044fda8228de58b83e331875bbe34707989a42fcba1f47bd4ab", "238d85db5b099194314e5e800f89fc25df2b9ce96e6d7d50398191efdd3c7363"}) 05:10:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) fork() 05:10:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x148, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x120, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dc4fa0c25c4e193ed115b6b274047242b1d0ac4b6eef547b21fa003df3ab1a35"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x29, 0x2, @local}, {0x5}}]}]}]}]}]}, 0x148}}, 0x0) 05:10:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:17 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x0, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250100000008000200020000000800010002000000540004800500030007000000050003000600000005000300010000000500030000000000050003"], 0xfc}}, 0x0) 05:10:17 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:17 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:17 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x0, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:17 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:17 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) [ 649.062588][T21949] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.088119][T21954] tmpfs: Bad value for 'mpol' [ 649.100375][T21949] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 05:10:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250100000008000200020000000800010002000000540004800500030007000000050003000600000005000300010000000500030000000000050003"], 0xfc}}, 0x0) 05:10:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:17 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 649.153699][T21967] tmpfs: Bad value for 'mpol' 05:10:17 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:17 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:17 executing program 0: unshare(0x400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x303880, 0x0) readahead(r0, 0x0, 0x0) [ 649.204046][T21975] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.231606][T21981] tmpfs: Bad value for 'mpol' [ 649.231778][T21975] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.307960][T21995] tmpfs: Bad value for 'mpol' 05:10:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:18 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:18 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x0, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:18 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c, 0x0}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@dontfrag={{0xf}}], 0x18}}], 0x2, 0x0) 05:10:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 05:10:18 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:18 executing program 3: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:18 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 649.984030][T22015] tmpfs: Bad value for 'mpol' 05:10:18 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a42, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) 05:10:18 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) [ 650.096641][T22035] tmpfs: Bad value for 'mpol' 05:10:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:19 executing program 3: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:19 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 05:10:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x2c}}, 0x0) 05:10:19 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:19 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x0, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:19 executing program 3: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 650.868477][T22061] tmpfs: Bad value for 'mpol' 05:10:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:10:19 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x80084503, 0x0) 05:10:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:19 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x0, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0xd, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) 05:10:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:10:20 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:20 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x0, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:20 executing program 1: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:20 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00010000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, 0x0) 05:10:20 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:20 executing program 1: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1b, "d53d73392efc7a74e4099896d9862df470b2d5"}) ioctl$TIOCGSID(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:10:20 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:21 executing program 1: creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:21 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 05:10:21 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:21 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x0, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:21 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:21 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:21 executing program 4: r0 = io_uring_setup(0x42b4, &(0x7f0000000bc0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) 05:10:21 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) [ 652.683288][T22172] tmpfs: Bad value for 'mpol' 05:10:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:22 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x7, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 05:10:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:22 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 653.492557][T22206] tmpfs: Bad value for 'mpol' 05:10:22 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}}, 0x0) 05:10:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 653.594025][T22226] tmpfs: Bad value for 'mpol' 05:10:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:23 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:10:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:23 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:23 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:23 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:10:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:23 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:23 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x40d80) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 05:10:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:23 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:23 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:24 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 05:10:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:24 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:24 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 05:10:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:24 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:24 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:24 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 05:10:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) 05:10:24 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 05:10:24 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, 0x0, 0x0) 05:10:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:25 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:25 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:25 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:25 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, 0x0, 0x0) 05:10:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:25 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:25 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, 0x0, 0x0) 05:10:25 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 657.087408][T22410] SELinux: security_context_str_to_sid(user_u) failed for (dev tmpfs, type tmpfs) errno=-22 05:10:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:25 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 657.180810][T22427] SELinux: security_context_str_to_sid(user_u) failed for (dev tmpfs, type tmpfs) errno=-22 05:10:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:26 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:26 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:26 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:26 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9, r2, 0xb) 05:10:26 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 657.983273][T22452] SELinux: security_context_str_to_sid(user_u) failed for (dev tmpfs, type tmpfs) errno=-22 05:10:26 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:26 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:26 executing program 4: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:26 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 658.116934][T22471] tmpfs: Bad value for 'mpol' 05:10:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:27 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:27 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:27 executing program 4: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:27 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:27 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x0, r2, 0xb) 05:10:27 executing program 4: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:27 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:27 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:27 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 658.892685][T22498] tmpfs: Bad value for 'mpol' 05:10:27 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:27 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x0]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 658.980341][T22515] tmpfs: Bad value for 'mpol' [ 659.041620][T22529] tmpfs: Bad value for 'mpol' 05:10:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 05:10:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:28 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:28 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x0, r2, 0xb) 05:10:28 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x0]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:28 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:28 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x0]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:28 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) [ 659.825464][T22551] tmpfs: Bad value for 'mpol' 05:10:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:28 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 659.896817][T22563] tmpfs: Bad value for 'mpol' 05:10:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 05:10:29 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:29 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:29 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x0, r2, 0xb) 05:10:29 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:29 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:29 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:29 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 660.703187][T22595] tmpfs: Bad value for 'mpol' 05:10:29 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) 05:10:29 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 660.796572][T22609] tmpfs: Bad value for 'mpol' 05:10:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 05:10:30 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:30 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) 05:10:30 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:30 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:10:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:30 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:30 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x0, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 661.621294][T22635] tmpfs: Bad value for 'mpol' 05:10:30 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:30 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:10:30 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x0, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 661.673561][T22646] tmpfs: Bad value for 'mpol' 05:10:30 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) [ 661.752239][T22661] tmpfs: Bad value for 'mpol' 05:10:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x0, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:31 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1}}) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:10:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 662.491725][T22675] tmpfs: Bad value for 'mpol' 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 662.564741][T22689] tmpfs: Bad value for 'mpol' 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) [ 662.642143][T22699] tmpfs: Bad value for 'mpol' 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) [ 662.707885][T22712] tmpfs: Bad value for 'mpol' 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 662.733146][T22719] tmpfs: Bad value for 'mpol' 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 05:10:31 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x0, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 05:10:31 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 662.837307][T22734] tmpfs: Bad value for 'mpol' [ 662.848310][T22730] tmpfs: Bad value for 'mpol' [ 662.860443][T22738] tmpfs: Bad value for 'mpol' 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 05:10:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="f1b587f9969a809548d40600000000000000a79c2151b0c86171883c79d16c6a0218a85742c7fc915ef4b2fc0971aa11d994155614ef05d053193c6bd0a61f2c50b0e10f7ca33f241488892425651bd11503e8537bf733a53bcafbacb89192b6a1bee511a4cb6e7eeebc2d73fe96e4cfd24e43899682fdbcc6b689fc52cf01043f00000000000000d1f60673060000e456b14ccd989b78532d5bacac8a246b2787b90ff8976d7a72b400914127432ff43ba66b74368d35db30ec0ef6a980bc5808cdd30be1d5acfcb14767eedc80435d73c48608eb8bf9556bbc0e994f529091000008000000000000000000001f0043fc2d85a66e5a2c7f003c9f22cc1c142e09000000698de731ec233d7e37a0a6bfa3d8cf13864844b8fd3d099a4332d5d1c75de95a015ae00663a2b8a137f14f07ad2774b675e8752a7d2bc289ef3fe32b2bf8a9ee6e4acb78ca4519764d072054bc80db5fdd606b7b28b129f9f7e83a71c410ee1ecd0a047a86c28da9f6fc64030b0261abd43af4d538fa8a9127298eb201dd303b9735efc89a56d5650d69bab4090aebafbb4a636f0164aa9150d394392941c5979af61765d236c4090162effd5e07d944c2e3716cb6c632a08bcb292108ea4cfa072f3ecd21c20dcdcf5f7e1ea5cdf48f01b20e9b214e21af73122118b829df7eb8840000000000ee5d5996f1ba7a0000000000000000a8b2e054657cf10367bd920fe49f1cc6d4895de20d6700000000000000000000000000c7015fd38582590b2b1d392c920b7bce33aa14b0272b7b97b3317bab7c3429bd738d2425becd11e8c64ece314c36eb63421b329d5a6443c1fa8cb2b52150ea562d6b1849880bd5fa58ff241e7c5fcabe04255b7c699ee8b0c4aa0fe10ccca067"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0x0) 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x0, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 05:10:31 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) [ 662.959116][T22755] tmpfs: Bad value for 'mpol' [ 662.964409][T22757] tmpfs: Bad value for 'mpol' [ 662.979937][T22759] tmpfs: Bad value for 'mpol' 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x0, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 663.052938][T22773] tmpfs: Bad value for 'mpol' 05:10:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) 05:10:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:31 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) [ 663.080869][T22776] tmpfs: Bad value for 'mpol' [ 663.097394][T22779] tmpfs: Bad value for 'mpol' 05:10:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8d01) ioctl$SG_SCSI_RESET(r0, 0x2284, 0xe04f00) [ 663.160468][T22784] tmpfs: Bad value for 'mpol' [ 663.161789][T22790] tmpfs: Bad value for 'mpol' 05:10:31 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0x0) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) 05:10:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}}, 0x0) 05:10:31 executing program 4: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:31 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 663.203633][T22795] tmpfs: Bad value for 'mpol' [ 663.283592][T22809] tmpfs: Bad value for 'mpol' 05:10:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x33}, [@extra_flags={0x8}, @mark={0xc}]}, 0x3c}}, 0x0) 05:10:31 executing program 3: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x0]}}}}]}) 05:10:32 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 663.307860][T22805] tmpfs: Bad value for 'mpol' [ 663.372067][T22826] tmpfs: Bad value for 'mpol' [ 663.384806][T22829] tmpfs: Bad value for 'mpol' 05:10:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:32 executing program 4: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:32 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=@allocspi={0x398, 0x16, 0x1, 0x70bd29, 0x25dfdbfc, {{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0x200, 0x4e23, 0x8, 0xa, 0x20, 0x20, 0x5e, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x4d5, 0x32}, @in6=@mcast1, {0xffffffff, 0x6cfc, 0x9, 0x800, 0x9, 0x81, 0x8, 0x1}, {0x7, 0x20, 0x100, 0xffff}, {0x2e87, 0x3, 0xd7}, 0x70bd2a, 0x3500, 0x2, 0x0, 0x1f, 0x4f}, 0x0, 0x8}, [@tfcpad={0x8}, @migrate={0x134, 0x11, [{@in=@local, @in=@loopback, @in=@broadcast, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, @in6=@local, @in=@remote, 0x2b, 0x1, 0x0, 0x3507, 0x2, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, 0x7, 0x0, 0x0, 0x2, 0xa}, {@in6=@mcast1, @in=@private=0xa010101, @in6=@mcast2, @in6=@private0, 0x2b, 0x3, 0x0, 0x3506, 0xa, 0xa}]}, @sec_ctx={0x99, 0x8, {0x95, 0x8, 0x0, 0x1, 0x8d, "a0ad35a2344d8b5668a1f5b9404bec73bb89cbbc6a52cb980fffb9fbe5bdac0f4cf8256f25e1f34d9c18e0052cb79cec768e2f24ceb934f22daab26562e222b4f595631f49177f9dc9a3102094937f99adc2d199cacef2fa223bdd7b6f3588b6e9680edf0271b4cefa58e5ecc6d450ad3dffe491b7e686790ee8df75307e6fecc78bdbf257a2628080b98681d2"}}, @policy={0xac, 0x7, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4e20, 0x6, 0x4e24, 0x8, 0x2, 0x0, 0xa0, 0x3b, 0x0, 0xee01}, {0x3, 0xffff, 0x8000, 0xae, 0x307, 0x3, 0xe513, 0x40}, {0x800, 0x9, 0x4, 0x3}, 0x7, 0x6e6bb5, 0x1, 0x1, 0x3, 0x1}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 05:10:32 executing program 5: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000cf8000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/187) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x0) getdents(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x14, 0x2, 0x2, 0x1, 0x0, 0x9, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4210, 0x1, 0x5, 0x6, 0x5cf, 0x4, 0x1ff}, 0x0, 0x400000000010, r2, 0xa) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(r3, 0xc) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r0, &(0x7f00008a7000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x6, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x14000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xc3, 0x0, 0x9d, 0x0, 0x0, 0x80007ff, 0x10186, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8300, 0x1f, 0x80, 0x5, 0x3, 0x8, 0x2001}, 0xffffffffffffffff, 0x9, r2, 0x0) 05:10:32 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x0, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 664.075146][T22852] tmpfs: Bad value for 'mpol' [ 664.079268][T22854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:10:32 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r3, 0x0) setuid(0x0) 05:10:32 executing program 4: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 05:10:32 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x0, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:32 executing program 5: r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000400)="c2", 0x1, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f00000002c0)="c2", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000440), &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, r1, r0}, &(0x7f0000000480)=""/235, 0xeb, &(0x7f0000000600)={&(0x7f0000000580)={'streebog512-generic\x00'}}) [ 664.155201][T22864] tmpfs: Bad value for 'mpol' 05:10:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 664.194983][T22874] tmpfs: Bad value for 'mpol' [ 664.222682][T22879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:10:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:33 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x0, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:33 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, 0x0, 0x0, 0x103) 05:10:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004300)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001440)='P', 0x1}], 0x1}}, {{&(0x7f0000001880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x3, 0x8040) 05:10:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x37, &(0x7f0000000400)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 05:10:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304}, "fd75d39d225583ae", "6965b9b044f515ea79f251cdc7b20210", "4402caee", "1956e0a823875920"}, 0x28) recvfrom$inet6(r0, &(0x7f00000006c0)=""/176, 0xb0, 0x40000162, 0x0, 0x0) 05:10:33 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, 0x0, 0x0, 0x103) 05:10:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000640)={0x80, 0x0, 'client0\x00', 0x0, "a561d824b8cd587f", "bb13843ffde6ac966bcba814ae6a158c66a242079e07097bd0bd11cb219bfd57"}) [ 665.012452][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.013649][T22906] tmpfs: Bad value for 'mpol' 05:10:33 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:33 executing program 3: getresuid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@fat=@umask={'umask', 0x3d, 0x80000000}}]}) [ 665.150066][T22932] tmpfs: Bad value for 'mpol' [ 665.152130][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:10:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="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", 0x12e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:10:34 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) mknodat$null(r0, 0x0, 0x0, 0x103) 05:10:34 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:34 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="20000000200100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef7103473fc54d10dc2b10c69b2cc93e45ad647d87428677c3c094ccd8d33768dfe921bd815c137834", 0x62, 0x400}], 0x0, &(0x7f0000013800)) 05:10:34 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:34 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:34 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b149835076c7"}]}, 0x34}}, 0x0) [ 665.924750][T22953] tmpfs: Bad value for 'mpol' 05:10:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) 05:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9b5e001b15d3ee4deb63bf5ea40a07d141aca89d4dd53ff3"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x70}}, 0x0) 05:10:34 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 666.020077][T22972] tmpfs: Bad value for 'mpol' 05:10:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:35 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x0, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x40}}, 0x0) 05:10:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:35 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x0, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 05:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r4, 0x83, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r1, 0x83, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r7, 0x83, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc}}}}, 0x28}}, 0x0) 05:10:35 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x0, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 666.854410][T23016] loop5: detected capacity change from 0 to 4 [ 666.868239][T23016] FAT-fs (loop5): bogus number of reserved sectors [ 666.875249][T23016] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 666.884786][T23016] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 666.953301][T23016] loop5: detected capacity change from 0 to 4 [ 666.962145][T23016] FAT-fs (loop5): bogus number of reserved sectors [ 666.968818][T23016] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 666.978371][T23016] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:36 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x6) 05:10:36 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x13ee148d, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@fat=@umask}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@debug}, {@nodots}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}]}) 05:10:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:36 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 667.730376][T23087] tmpfs: Bad value for 'mpol' [ 667.737737][T23086] loop5: detected capacity change from 0 to 4 [ 667.755761][T23086] FAT-fs (loop5): bogus number of reserved sectors [ 667.762330][T23086] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 667.771638][T23086] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:36 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 667.790375][T23091] loop4: detected capacity change from 0 to 264192 [ 667.799878][T23099] tmpfs: Bad value for 'mpol' [ 667.800767][T23091] FAT-fs (loop4): Unrecognized mount option "smackfsfloor=/dev/binder#" or missing value 05:10:36 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 667.836151][T23114] tmpfs: Bad value for 'mpol' [ 667.861569][T23116] loop5: detected capacity change from 0 to 4 [ 667.861597][T23091] loop4: detected capacity change from 0 to 264192 [ 667.875665][T23091] FAT-fs (loop4): Unrecognized mount option "smackfsfloor=/dev/binder#" or missing value [ 667.891853][T23116] FAT-fs (loop5): bogus number of reserved sectors [ 667.898966][T23116] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 667.909022][T23116] FAT-fs (loop5): Can't find a valid FAT filesystem [ 667.916087][T23124] tmpfs: Bad value for 'mpol' 05:10:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={0x3c, r3, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}}, 0x0) 05:10:37 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 05:10:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:37 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 668.634571][T23141] loop5: detected capacity change from 0 to 4 [ 668.650024][T23142] tmpfs: Bad value for 'mpol' [ 668.661593][T23141] FAT-fs (loop5): bogus number of reserved sectors [ 668.668337][T23141] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 668.677920][T23141] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x34, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}}, 0x0) 05:10:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:37 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) dup3(r2, 0xffffffffffffffff, 0x0) [ 668.732181][T23158] tmpfs: Bad value for 'mpol' [ 668.790629][T23176] loop5: detected capacity change from 0 to 4 05:10:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0070000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) 05:10:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:38 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}]}) 05:10:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) dup3(r2, 0xffffffffffffffff, 0x0) 05:10:38 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) dup3(r2, 0xffffffffffffffff, 0x0) 05:10:38 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}]}) 05:10:38 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:38 executing program 4: unshare(0x20000400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) [ 669.529767][T23198] loop5: detected capacity change from 0 to 4 [ 669.529982][T23197] tmpfs: Bad value for 'mpol' 05:10:38 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30, 0x2d, 0x35, 0x3a, 0x30, 0x2f]}}}, 0x33}]}) 05:10:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) [ 669.574488][T23211] tmpfs: Bad value for 'mpol' [ 669.627148][T23222] tmpfs: Bad value for 'mpol' 05:10:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:39 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 05:10:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:39 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7f}) 05:10:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc) 05:10:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:39 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x18, r2, 0x1305, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 670.415686][T23245] loop5: detected capacity change from 0 to 4 05:10:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), 0x0, 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 670.553112][T23278] loop5: detected capacity change from 0 to 4 05:10:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e80040001"], 0x34}}, 0x0) 05:10:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$TCSETSF(r0, 0x5453, 0x0) 05:10:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), 0x0, 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40345410, &(0x7f0000000200)={0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x6, 0xe7}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000200)={0x1}) [ 671.309177][T23298] loop5: detected capacity change from 0 to 4 05:10:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x0) [ 671.413005][T23326] loop4: detected capacity change from 0 to 16 [ 671.423097][T23326] FAT-fs (loop4): Directory bread(block 2571) failed [ 671.429929][T23326] FAT-fs (loop4): Directory bread(block 2572) failed [ 671.437089][T23326] FAT-fs (loop4): Directory bread(block 2573) failed [ 671.443866][T23326] FAT-fs (loop4): Directory bread(block 2574) failed [ 671.451031][T23326] FAT-fs (loop4): Directory bread(block 2575) failed [ 671.458616][T23326] FAT-fs (loop4): Directory bread(block 2576) failed [ 671.466072][T23326] FAT-fs (loop4): Directory bread(block 2577) failed [ 671.473035][T23326] FAT-fs (loop4): Directory bread(block 2578) failed [ 671.480689][T23326] FAT-fs (loop4): Directory bread(block 2579) failed [ 671.487681][T23326] FAT-fs (loop4): Directory bread(block 2580) failed 05:10:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), 0x0, 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x0) 05:10:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 05:10:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x0) 05:10:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 672.184883][T23347] loop4: detected capacity change from 0 to 16 [ 672.191552][T23346] loop5: detected capacity change from 0 to 4 [ 672.207882][T23347] FAT-fs (loop4): Directory bread(block 2571) failed [ 672.215491][T23347] FAT-fs (loop4): Directory bread(block 2572) failed [ 672.222543][T23347] FAT-fs (loop4): Directory bread(block 2573) failed 05:10:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 672.231442][T23347] FAT-fs (loop4): Directory bread(block 2574) failed [ 672.242995][T23347] FAT-fs (loop4): Directory bread(block 2575) failed [ 672.249991][T23347] FAT-fs (loop4): Directory bread(block 2576) failed [ 672.257193][T23347] FAT-fs (loop4): Directory bread(block 2577) failed [ 672.263949][T23347] FAT-fs (loop4): Directory bread(block 2578) failed [ 672.271127][T23347] FAT-fs (loop4): Directory bread(block 2579) failed [ 672.278211][T23347] FAT-fs (loop4): Directory bread(block 2580) failed 05:10:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 672.304199][T23368] loop1: detected capacity change from 0 to 16 [ 672.323254][T23368] FAT-fs (loop1): Directory bread(block 2571) failed [ 672.337097][T23373] FAT-fs (loop5): bogus number of reserved sectors [ 672.343902][T23373] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 672.344026][T23368] FAT-fs (loop1): Directory bread(block 2572) failed [ 672.353703][T23373] FAT-fs (loop5): Can't find a valid FAT filesystem [ 672.363398][T23368] FAT-fs (loop1): Directory bread(block 2573) failed [ 672.375099][T23368] FAT-fs (loop1): Directory bread(block 2574) failed [ 672.382621][T23368] FAT-fs (loop1): Directory bread(block 2575) failed [ 672.395850][T23368] FAT-fs (loop1): Directory bread(block 2576) failed [ 672.402946][T23368] FAT-fs (loop1): Directory bread(block 2577) failed [ 672.410444][T23384] loop4: detected capacity change from 0 to 16 [ 672.420019][T23384] FAT-fs (loop4): Directory bread(block 2571) failed [ 672.426340][T23368] FAT-fs (loop1): Directory bread(block 2578) failed [ 672.427530][T23384] FAT-fs (loop4): Directory bread(block 2572) failed [ 672.435396][T23368] FAT-fs (loop1): Directory bread(block 2579) failed [ 672.443972][T23384] FAT-fs (loop4): Directory bread(block 2573) failed [ 672.456602][T23384] FAT-fs (loop4): Directory bread(block 2574) failed [ 672.463350][T23368] FAT-fs (loop1): Directory bread(block 2580) failed [ 672.463449][T23384] FAT-fs (loop4): Directory bread(block 2575) failed [ 672.477494][T23384] FAT-fs (loop4): Directory bread(block 2576) failed [ 672.484460][T23384] FAT-fs (loop4): Directory bread(block 2577) failed [ 672.492105][T23384] FAT-fs (loop4): Directory bread(block 2578) failed [ 672.499226][T23384] FAT-fs (loop4): Directory bread(block 2579) failed [ 672.506571][T23384] FAT-fs (loop4): Directory bread(block 2580) failed 05:10:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 05:10:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 673.068265][T23405] loop4: detected capacity change from 0 to 16 [ 673.084459][T23405] FAT-fs (loop4): Directory bread(block 2571) failed [ 673.094676][T23405] FAT-fs (loop4): Directory bread(block 2572) failed [ 673.100529][T23409] loop1: detected capacity change from 0 to 16 [ 673.110311][T23405] FAT-fs (loop4): Directory bread(block 2573) failed 05:10:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 673.118395][T23414] FAT-fs (loop5): bogus number of reserved sectors [ 673.125029][T23414] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 673.134262][T23414] FAT-fs (loop5): Can't find a valid FAT filesystem [ 673.144101][T23405] FAT-fs (loop4): Directory bread(block 2574) failed [ 673.151552][T23405] FAT-fs (loop4): Directory bread(block 2575) failed [ 673.159651][T23405] FAT-fs (loop4): Directory bread(block 2576) failed 05:10:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 673.166911][T23409] FAT-fs (loop1): Directory bread(block 2571) failed [ 673.173783][T23405] FAT-fs (loop4): Directory bread(block 2577) failed [ 673.180930][T23405] FAT-fs (loop4): Directory bread(block 2578) failed [ 673.200386][T23405] FAT-fs (loop4): Directory bread(block 2579) failed [ 673.213228][T23405] FAT-fs (loop4): Directory bread(block 2580) failed [ 673.214497][T23409] FAT-fs (loop1): Directory bread(block 2572) failed [ 673.247863][T23435] FAT-fs (loop5): bogus number of reserved sectors [ 673.255086][T23435] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code 05:10:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 05:10:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 673.264581][T23435] FAT-fs (loop5): Can't find a valid FAT filesystem [ 673.269812][T23409] FAT-fs (loop1): Directory bread(block 2573) failed [ 673.278331][T23409] FAT-fs (loop1): Directory bread(block 2574) failed [ 673.285039][T23409] FAT-fs (loop1): Directory bread(block 2575) failed [ 673.292627][T23409] FAT-fs (loop1): Directory bread(block 2576) failed [ 673.299911][T23409] FAT-fs (loop1): Directory bread(block 2577) failed [ 673.306752][T23409] FAT-fs (loop1): Directory bread(block 2578) failed [ 673.313525][T23409] FAT-fs (loop1): Directory bread(block 2579) failed [ 673.321917][T23409] FAT-fs (loop1): Directory bread(block 2580) failed 05:10:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:42 executing program 4: mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 05:10:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:42 executing program 4: mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 673.974543][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.986163][T23467] FAT-fs (loop4): unable to read boot sector [ 673.995998][T23470] loop1: detected capacity change from 0 to 16 05:10:42 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:42 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 674.029859][T23470] FAT-fs (loop1): Directory bread(block 2571) failed [ 674.049980][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 674.062170][T23479] FAT-fs (loop4): unable to read boot sector [ 674.073407][T23470] FAT-fs (loop1): Directory bread(block 2572) failed 05:10:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 674.080447][T23470] FAT-fs (loop1): Directory bread(block 2573) failed [ 674.087331][T23470] FAT-fs (loop1): Directory bread(block 2574) failed [ 674.094219][T23470] FAT-fs (loop1): Directory bread(block 2575) failed [ 674.106835][T23470] FAT-fs (loop1): Directory bread(block 2576) failed [ 674.130880][T23470] FAT-fs (loop1): Directory bread(block 2577) failed [ 674.140194][T23470] FAT-fs (loop1): Directory bread(block 2578) failed [ 674.149724][T23470] FAT-fs (loop1): Directory bread(block 2579) failed [ 674.164132][T23470] FAT-fs (loop1): Directory bread(block 2580) failed 05:10:43 executing program 4: mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:43 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:43 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 674.857509][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 674.872240][T23513] FAT-fs (loop4): unable to read boot sector [ 674.873128][T23514] loop1: detected capacity change from 0 to 16 [ 674.897731][T23514] FAT-fs (loop1): Directory bread(block 2571) failed 05:10:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) 05:10:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 674.905297][T23514] FAT-fs (loop1): Directory bread(block 2572) failed [ 674.918922][T23514] FAT-fs (loop1): Directory bread(block 2573) failed [ 674.926292][T23514] FAT-fs (loop1): Directory bread(block 2574) failed [ 674.933183][T23514] FAT-fs (loop1): Directory bread(block 2575) failed [ 674.940238][T23514] FAT-fs (loop1): Directory bread(block 2576) failed [ 674.948401][T23514] FAT-fs (loop1): Directory bread(block 2577) failed [ 674.974658][T23527] loop4: detected capacity change from 0 to 16 [ 674.981390][T23514] FAT-fs (loop1): Directory bread(block 2578) failed [ 674.988537][T23532] loop5: detected capacity change from 0 to 4 [ 675.000127][T23527] FAT-fs (loop4): Directory bread(block 2571) failed [ 675.011319][T23527] FAT-fs (loop4): Directory bread(block 2572) failed [ 675.014715][T23514] FAT-fs (loop1): Directory bread(block 2579) failed 05:10:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 675.020912][T23527] FAT-fs (loop4): Directory bread(block 2573) failed [ 675.034342][T23532] FAT-fs (loop5): bogus number of reserved sectors [ 675.041252][T23532] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 675.042038][T23527] FAT-fs (loop4): Directory bread(block 2574) failed [ 675.052270][T23532] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x7c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x7c}}, 0x0) [ 675.073060][T23527] FAT-fs (loop4): Directory bread(block 2575) failed [ 675.076415][T23514] FAT-fs (loop1): Directory bread(block 2580) failed [ 675.082466][T23527] FAT-fs (loop4): Directory bread(block 2576) failed [ 675.098310][T23527] FAT-fs (loop4): Directory bread(block 2577) failed [ 675.105195][T23527] FAT-fs (loop4): Directory bread(block 2578) failed [ 675.112689][T23527] FAT-fs (loop4): Directory bread(block 2579) failed 05:10:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}]}, 0x68}}, 0x0) [ 675.125880][T23527] FAT-fs (loop4): Directory bread(block 2580) failed 05:10:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:44 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:44 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}]}, 0x68}}, 0x0) 05:10:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 675.737494][T23572] loop4: detected capacity change from 0 to 16 [ 675.744262][T23573] loop5: detected capacity change from 0 to 4 [ 675.753924][T23572] FAT-fs (loop4): Directory bread(block 2571) failed [ 675.772718][T23578] loop1: detected capacity change from 0 to 16 05:10:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 675.789225][T23573] FAT-fs (loop5): bogus number of reserved sectors [ 675.796217][T23573] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 675.807005][T23573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 675.809193][T23572] FAT-fs (loop4): Directory bread(block 2572) failed 05:10:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}]}, 0x68}}, 0x0) 05:10:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 675.833489][T23572] FAT-fs (loop4): Directory bread(block 2573) failed [ 675.848612][T23572] FAT-fs (loop4): Directory bread(block 2574) failed [ 675.855679][T23572] FAT-fs (loop4): Directory bread(block 2575) failed [ 675.862562][T23572] FAT-fs (loop4): Directory bread(block 2576) failed 05:10:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x50}}, 0x0) [ 675.885684][T23572] FAT-fs (loop4): Directory bread(block 2577) failed [ 675.901004][T23572] FAT-fs (loop4): Directory bread(block 2578) failed [ 675.908353][T23572] FAT-fs (loop4): Directory bread(block 2579) failed [ 675.916195][T23597] loop5: detected capacity change from 0 to 4 [ 675.916747][T23572] FAT-fs (loop4): Directory bread(block 2580) failed [ 675.945864][T23597] FAT-fs (loop5): bogus number of reserved sectors [ 675.952777][T23597] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 675.963743][T23597] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:45 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x50}}, 0x0) 05:10:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:45 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x50}}, 0x0) [ 676.620659][T23622] loop4: detected capacity change from 0 to 16 [ 676.631922][T23621] loop5: detected capacity change from 0 to 4 [ 676.640446][T23622] FAT-fs (loop4): Directory bread(block 2571) failed [ 676.651368][T23626] loop1: detected capacity change from 0 to 16 [ 676.662420][T23622] FAT-fs (loop4): Directory bread(block 2572) failed 05:10:45 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 676.673460][T23621] FAT-fs (loop5): bogus number of reserved sectors [ 676.680213][T23621] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 676.691285][T23621] FAT-fs (loop5): Can't find a valid FAT filesystem [ 676.708621][T23622] FAT-fs (loop4): Directory bread(block 2573) failed 05:10:45 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:45 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) [ 676.734018][T23622] FAT-fs (loop4): Directory bread(block 2574) failed [ 676.741839][T23622] FAT-fs (loop4): Directory bread(block 2575) failed [ 676.752870][T23622] FAT-fs (loop4): Directory bread(block 2576) failed [ 676.766894][T23622] FAT-fs (loop4): Directory bread(block 2577) failed [ 676.774061][T23622] FAT-fs (loop4): Directory bread(block 2578) failed [ 676.794572][T23645] loop5: detected capacity change from 0 to 4 [ 676.814118][T23645] FAT-fs (loop5): bogus number of reserved sectors [ 676.821179][T23645] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 676.824728][T23622] FAT-fs (loop4): Directory bread(block 2579) failed [ 676.832113][T23645] FAT-fs (loop5): Can't find a valid FAT filesystem [ 676.846182][T23622] FAT-fs (loop4): Directory bread(block 2580) failed [ 676.848592][T23654] loop1: detected capacity change from 0 to 16 05:10:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) 05:10:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) 05:10:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 677.555674][T23675] loop4: detected capacity change from 0 to 16 05:10:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) 05:10:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 677.606200][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 677.620872][T23675] FAT-fs (loop4): unable to read boot sector [ 677.624367][T23681] loop1: detected capacity change from 0 to 16 [ 677.636604][T23685] loop5: detected capacity change from 0 to 4 05:10:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 677.670246][T23685] FAT-fs (loop5): bogus number of reserved sectors [ 677.676819][T23685] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 677.687821][T23685] FAT-fs (loop5): Can't find a valid FAT filesystem [ 677.734684][T23710] loop1: detected capacity change from 0 to 16 05:10:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) 05:10:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0), 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}}, 0x0) 05:10:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 678.436901][T23730] loop4: detected capacity change from 0 to 16 [ 678.467732][T23735] loop1: detected capacity change from 0 to 16 05:10:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001440)=[{0x0, 0x0, 0xa65b}, {&(0x7f0000001340)="6fcda78268a606bebec688dc965bfd12ffffff", 0x13, 0x3}], 0x0, &(0x7f00000000c0)) 05:10:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:47 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x13, 0x0, 0x400}, 0x0) 05:10:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), 0x0, 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 678.490337][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.502965][T23730] FAT-fs (loop4): unable to read boot sector [ 678.509867][T23733] loop5: detected capacity change from 0 to 4 [ 678.565264][T23733] FAT-fs (loop5): bogus number of reserved sectors [ 678.571890][T23733] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 678.582873][T23733] FAT-fs (loop5): Can't find a valid FAT filesystem [ 678.619733][T23762] loop4: detected capacity change from 0 to 16 [ 678.666220][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 678.685754][T23762] FAT-fs (loop4): unable to read boot sector 05:10:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5], 0x44}}, 0x0) sendfile(r3, r2, 0x0, 0x100007000) 05:10:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0), 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 679.307539][T23784] FAT-fs (loop4): bogus number of reserved sectors [ 679.314340][T23784] FAT-fs (loop4): Can't find a valid FAT filesystem [ 679.323494][T23784] FAT-fs (loop4): bogus number of reserved sectors [ 679.326168][T23788] FAT-fs (loop1): bogus number of reserved sectors [ 679.330236][T23784] FAT-fs (loop4): Can't find a valid FAT filesystem [ 679.336864][T23788] FAT-fs (loop1): Can't find a valid FAT filesystem [ 679.344817][T23787] loop5: detected capacity change from 0 to 4 05:10:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 679.359577][T23787] FAT-fs (loop5): bogus number of reserved sectors [ 679.366368][T23787] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 679.377214][T23787] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0), 0x0, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f00000139c0)={0x2c, r1, 0x821, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) [ 679.511685][T23822] FAT-fs (loop1): bogus number of reserved sectors [ 679.518499][T23822] FAT-fs (loop1): Can't find a valid FAT filesystem [ 679.545250][T23829] FAT-fs (loop4): bogus number of reserved sectors [ 679.545299][T23831] loop5: detected capacity change from 0 to 4 [ 679.552093][T23829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 679.572867][T23831] FAT-fs (loop5): bogus number of reserved sectors [ 679.579776][T23831] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 679.590921][T23831] FAT-fs (loop5): Can't find a valid FAT filesystem [ 679.614605][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 679.626144][T23829] FAT-fs (loop4): unable to read boot sector 05:10:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000022c0), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 05:10:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00', 0x1, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 680.188730][T23860] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.200172][T23860] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 680.208850][T23861] loop5: detected capacity change from 0 to 4 [ 680.212173][T23864] FAT-fs (loop1): bogus number of reserved sectors [ 680.221671][T23864] FAT-fs (loop1): Can't find a valid FAT filesystem [ 680.229929][T23861] FAT-fs (loop5): bogus number of reserved sectors 05:10:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 680.236628][T23865] FAT-fs (loop4): bogus number of reserved sectors [ 680.236641][T23865] FAT-fs (loop4): Can't find a valid FAT filesystem [ 680.250125][T23861] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 680.252747][T23875] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.261023][T23861] FAT-fs (loop5): Can't find a valid FAT filesystem [ 680.278359][T23875] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 05:10:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00', 0x1, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$LOOP_SET_STATUS64(r0, 0x401070cd, 0x0) 05:10:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 680.284656][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.315157][T23865] FAT-fs (loop4): unable to read boot sector 05:10:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 680.382025][T23887] loop5: detected capacity change from 0 to 4 [ 680.406461][T23887] FAT-fs (loop5): bogus number of reserved sectors [ 680.413970][T23887] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 680.425133][T23887] FAT-fs (loop5): Can't find a valid FAT filesystem [ 680.436481][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.447955][T23900] FAT-fs (loop4): unable to read boot sector [ 681.033689][T23859] ================================================================== [ 681.042224][T23859] BUG: KCSAN: data-race in complete_signal / do_group_exit [ 681.049408][T23859] [ 681.051745][T23859] write to 0xffff888154cee1b4 of 4 bytes by task 23863 on cpu 1: [ 681.059457][T23859] complete_signal+0x4a5/0x600 [ 681.064240][T23859] __send_signal+0x680/0x760 [ 681.068963][T23859] send_signal+0x38e/0x3d0 [ 681.073799][T23859] send_sig_info+0xb5/0x100 [ 681.078384][T23859] send_sig+0x2b/0x30 [ 681.082513][T23859] pipe_write+0x8a6/0xca0 [ 681.087122][T23859] vfs_write+0x69d/0x770 [ 681.091544][T23859] ksys_write+0xce/0x180 [ 681.095862][T23859] __x64_sys_write+0x3e/0x50 [ 681.100532][T23859] do_syscall_64+0x34/0x50 [ 681.105051][T23859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.111318][T23859] [ 681.113650][T23859] read to 0xffff888154cee1b4 of 4 bytes by task 23859 on cpu 0: [ 681.122017][T23859] do_group_exit+0x51/0x1a0 [ 681.126984][T23859] __do_sys_exit_group+0xb/0x10 [ 681.132173][T23859] __se_sys_exit_group+0x5/0x10 [ 681.137108][T23859] __x64_sys_exit_group+0x16/0x20 [ 681.142129][T23859] do_syscall_64+0x34/0x50 [ 681.146553][T23859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.152791][T23859] [ 681.155206][T23859] Reported by Kernel Concurrency Sanitizer on: [ 681.161451][T23859] CPU: 0 PID: 23859 Comm: syz-executor.2 Not tainted 5.12.0-rc8-syzkaller #0 [ 681.170662][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:10:49 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}}, 0x0) 05:10:49 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00', 0x1, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 681.181362][T23859] ================================================================== 05:10:49 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) 05:10:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x3, 0x0, "7a9ccc3fa3c95264279ba5e53788f17e8af23a"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) [ 681.241516][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 681.252731][T23916] FAT-fs (loop4): unable to read boot sector [ 681.263598][T23917] loop5: detected capacity change from 0 to 4 05:10:50 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r1, r3, 0x0) [ 681.324137][T23917] FAT-fs (loop5): bogus number of reserved sectors [ 681.332051][T23917] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (4 sectors) [ 681.343340][T23917] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 681.369649][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 681.386060][T23938] FAT-fs (loop4): unable to read boot sector [ 681.416057][T23944] loop1: detected capacity change from 0 to 16 [ 681.440812][T23944] FAT-fs (loop1): bogus number of reserved sectors [ 681.447634][T23944] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:50 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 682.138924][T23969] loop1: detected capacity change from 0 to 16 [ 682.145977][T23970] loop5: detected capacity change from 0 to 4 [ 682.146419][T23974] loop4: detected capacity change from 0 to 16 [ 682.162164][T23974] FAT-fs (loop4): bogus number of reserved sectors [ 682.169068][T23974] FAT-fs (loop4): Can't find a valid FAT filesystem [ 682.179216][T23969] FAT-fs (loop1): bogus number of reserved sectors 05:10:50 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 682.185897][T23969] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:50 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 05:10:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 682.241923][T23970] FAT-fs (loop5): bogus number of reserved sectors [ 682.248891][T23970] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 682.258438][T23970] FAT-fs (loop5): Can't find a valid FAT filesystem [ 682.275907][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 05:10:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) [ 682.287310][T23989] FAT-fs (loop4): unable to read boot sector 05:10:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 682.320555][T23996] loop1: detected capacity change from 0 to 16 [ 682.352673][T23996] FAT-fs (loop1): bogus number of reserved sectors [ 682.359413][T23996] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 682.390839][T24010] loop4: detected capacity change from 0 to 16 [ 682.393603][T24013] loop5: detected capacity change from 0 to 4 [ 682.401195][T24010] FAT-fs (loop4): bogus number of reserved sectors [ 682.410568][T24010] FAT-fs (loop4): Can't find a valid FAT filesystem [ 682.416049][T24013] FAT-fs (loop5): bogus number of reserved sectors [ 682.424164][T24013] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 682.433839][T24013] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) [ 682.505255][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 682.517264][T24024] FAT-fs (loop4): unable to read boot sector [ 682.557816][T24033] loop1: detected capacity change from 0 to 16 [ 682.564628][T24035] loop5: detected capacity change from 0 to 4 [ 682.573680][T24033] FAT-fs (loop1): bogus number of reserved sectors [ 682.580415][T24033] FAT-fs (loop1): Can't find a valid FAT filesystem [ 682.586435][T24035] FAT-fs (loop5): bogus number of reserved sectors [ 682.594035][T24035] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 682.603645][T24035] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) [ 683.009016][T24058] loop1: detected capacity change from 0 to 16 [ 683.015721][T24060] loop5: detected capacity change from 0 to 4 [ 683.028050][T24060] FAT-fs (loop5): bogus number of reserved sectors [ 683.030343][T24066] loop4: detected capacity change from 0 to 16 [ 683.034625][T24060] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 683.051247][T24060] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 683.059247][T24066] FAT-fs (loop4): bogus number of reserved sectors [ 683.066216][T24066] FAT-fs (loop4): Can't find a valid FAT filesystem [ 683.074352][T24058] FAT-fs (loop1): bogus number of reserved sectors [ 683.081220][T24058] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 683.126115][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 683.138178][T24082] FAT-fs (loop4): unable to read boot sector 05:10:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 683.211151][T24103] loop5: detected capacity change from 0 to 4 [ 683.231030][T24103] FAT-fs (loop5): bogus number of reserved sectors [ 683.237856][T24103] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 683.242492][T24102] loop1: detected capacity change from 0 to 16 [ 683.247490][T24103] FAT-fs (loop5): Can't find a valid FAT filesystem [ 683.261469][T24107] loop4: detected capacity change from 0 to 16 [ 683.270793][T24102] FAT-fs (loop1): bogus number of reserved sectors [ 683.277517][T24102] FAT-fs (loop1): Can't find a valid FAT filesystem [ 683.284693][T24107] FAT-fs (loop4): bogus number of reserved sectors [ 683.291765][T24107] FAT-fs (loop4): Can't find a valid FAT filesystem [ 683.326919][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 683.338597][T24107] FAT-fs (loop4): unable to read boot sector 05:10:52 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 683.895955][T24130] loop1: detected capacity change from 0 to 16 [ 683.905777][T24130] FAT-fs (loop1): bogus number of reserved sectors [ 683.912484][T24130] FAT-fs (loop1): Can't find a valid FAT filesystem [ 683.919972][T24125] loop5: detected capacity change from 0 to 4 [ 683.926429][T24129] loop4: detected capacity change from 0 to 16 [ 683.936421][T24129] FAT-fs (loop4): bogus number of reserved sectors 05:10:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) [ 683.943230][T24129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 683.951324][T24125] FAT-fs (loop5): bogus number of reserved sectors [ 683.955113][T24129] FAT-fs (loop4): bogus number of reserved sectors [ 683.958070][T24125] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 683.964795][T24129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 683.975540][T24125] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 684.113321][T24169] loop1: detected capacity change from 0 to 16 [ 684.121777][T24171] loop5: detected capacity change from 0 to 4 [ 684.127289][T24172] loop4: detected capacity change from 0 to 16 [ 684.129513][T24169] FAT-fs (loop1): bogus number of reserved sectors [ 684.141448][T24169] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.148614][T24172] FAT-fs (loop4): bogus number of reserved sectors [ 684.155565][T24172] FAT-fs (loop4): Can't find a valid FAT filesystem [ 684.162403][T24171] FAT-fs (loop5): bogus number of reserved sectors [ 684.169052][T24171] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 684.178454][T24171] FAT-fs (loop5): Can't find a valid FAT filesystem [ 684.199234][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.210437][T24172] FAT-fs (loop4): unable to read boot sector 05:10:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 684.808787][T24200] loop5: detected capacity change from 0 to 4 [ 684.815627][T24201] loop1: detected capacity change from 0 to 16 [ 684.818395][T24204] loop4: detected capacity change from 0 to 16 [ 684.830728][T24200] FAT-fs (loop5): bogus number of reserved sectors [ 684.835812][T24204] FAT-fs (loop4): bogus number of reserved sectors [ 684.837459][T24200] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code 05:10:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:53 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 684.844178][T24204] FAT-fs (loop4): Can't find a valid FAT filesystem [ 684.853737][T24200] FAT-fs (loop5): Can't find a valid FAT filesystem [ 684.862555][T24201] FAT-fs (loop1): bogus number of reserved sectors [ 684.873796][T24201] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 684.959172][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.972246][T24220] FAT-fs (loop4): unable to read boot sector 05:10:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 685.026627][T24233] loop5: detected capacity change from 0 to 4 [ 685.047177][T24233] FAT-fs (loop5): bogus number of reserved sectors [ 685.053871][T24233] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 685.063641][T24233] FAT-fs (loop5): Can't find a valid FAT filesystem [ 685.070832][T24236] loop1: detected capacity change from 0 to 16 [ 685.080776][T24236] FAT-fs (loop1): bogus number of reserved sectors [ 685.087543][T24236] FAT-fs (loop1): Can't find a valid FAT filesystem [ 685.095921][T24247] loop4: detected capacity change from 0 to 16 [ 685.106255][T24247] FAT-fs (loop4): bogus number of reserved sectors [ 685.113154][T24247] FAT-fs (loop4): Can't find a valid FAT filesystem [ 685.155760][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 685.169598][T24247] FAT-fs (loop4): unable to read boot sector 05:10:54 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 685.678515][T24267] loop1: detected capacity change from 0 to 16 [ 685.688862][T24267] FAT-fs (loop1): bogus number of reserved sectors [ 685.695733][T24267] FAT-fs (loop1): Can't find a valid FAT filesystem [ 685.703102][T24274] loop4: detected capacity change from 0 to 16 [ 685.719378][T24274] FAT-fs (loop4): bogus number of reserved sectors 05:10:54 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) [ 685.721848][T24275] loop5: detected capacity change from 0 to 4 [ 685.726006][T24274] FAT-fs (loop4): Can't find a valid FAT filesystem [ 685.746791][T24275] FAT-fs (loop5): bogus number of reserved sectors [ 685.753938][T24275] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 685.763508][T24275] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 685.794037][T24286] loop1: detected capacity change from 0 to 16 [ 685.805579][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 685.812889][T24286] FAT-fs (loop1): bogus number of reserved sectors [ 685.823683][T24286] FAT-fs (loop1): Can't find a valid FAT filesystem [ 685.823889][T24292] FAT-fs (loop4): unable to read boot sector 05:10:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r3, 0x0) 05:10:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 685.898891][T24307] loop5: detected capacity change from 0 to 4 [ 685.934835][T24307] FAT-fs (loop5): bogus number of reserved sectors [ 685.941465][T24307] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 685.951193][T24307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 685.966136][T24317] loop4: detected capacity change from 0 to 16 [ 685.975312][T24317] FAT-fs (loop4): bogus number of reserved sectors [ 685.982366][T24317] FAT-fs (loop4): Can't find a valid FAT filesystem [ 685.990295][T24317] FAT-fs (loop4): bogus number of reserved sectors [ 685.996969][T24317] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:55 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 686.548488][T24341] loop5: detected capacity change from 0 to 4 [ 686.557208][T24341] FAT-fs (loop5): bogus number of reserved sectors [ 686.564051][T24341] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 686.573516][T24341] FAT-fs (loop5): Can't find a valid FAT filesystem [ 686.585780][T24344] loop1: detected capacity change from 0 to 16 [ 686.592287][T24345] loop4: detected capacity change from 0 to 16 05:10:55 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) [ 686.628498][T24344] FAT-fs (loop1): invalid media value (0x00) [ 686.634675][T24344] FAT-fs (loop1): Can't find a valid FAT filesystem [ 686.643304][T24345] FAT-fs (loop4): bogus number of reserved sectors [ 686.650421][T24345] FAT-fs (loop4): Can't find a valid FAT filesystem [ 686.660325][T24361] FAT-fs (loop4): bogus number of reserved sectors [ 686.666974][T24361] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 686.717230][T24368] loop5: detected capacity change from 0 to 4 [ 686.721810][T24373] loop4: detected capacity change from 0 to 16 [ 686.733466][T24373] FAT-fs (loop4): bogus number of reserved sectors [ 686.740746][T24373] FAT-fs (loop4): Can't find a valid FAT filesystem [ 686.742350][T24368] FAT-fs (loop5): bogus number of reserved sectors [ 686.748172][T24373] FAT-fs (loop4): bogus number of reserved sectors 05:10:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 686.754077][T24368] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 686.760792][T24373] FAT-fs (loop4): Can't find a valid FAT filesystem [ 686.769981][T24368] FAT-fs (loop5): Can't find a valid FAT filesystem [ 686.804878][T24383] loop1: detected capacity change from 0 to 16 [ 686.838973][T24383] FAT-fs (loop1): invalid media value (0x00) [ 686.845185][T24383] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 687.439187][T24405] loop5: detected capacity change from 0 to 4 [ 687.439269][T24404] loop1: detected capacity change from 0 to 16 [ 687.451762][T24406] loop4: detected capacity change from 0 to 16 [ 687.466857][T24405] FAT-fs (loop5): bogus number of reserved sectors [ 687.473577][T24405] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code 05:10:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy']) 05:10:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 687.482768][T24405] FAT-fs (loop5): Can't find a valid FAT filesystem [ 687.493370][T24404] FAT-fs (loop1): invalid media value (0x00) [ 687.499624][T24404] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.508948][T24406] FAT-fs (loop4): invalid media value (0x00) [ 687.515005][T24406] FAT-fs (loop4): Can't find a valid FAT filesystem [ 687.565532][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.571286][T24429] loop5: detected capacity change from 0 to 4 [ 687.577167][T24422] FAT-fs (loop4): unable to read boot sector 05:10:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) [ 687.610808][T24429] FAT-fs (loop5): bogus number of reserved sectors [ 687.617378][T24429] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 687.626540][T24429] FAT-fs (loop5): Can't find a valid FAT filesystem [ 687.634999][T24437] loop1: detected capacity change from 0 to 16 [ 687.653449][T24445] loop4: detected capacity change from 0 to 16 [ 687.680537][T24437] FAT-fs (loop1): invalid media value (0x00) [ 687.686794][T24437] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.710455][T24445] FAT-fs (loop4): invalid media value (0x00) [ 687.716970][T24445] FAT-fs (loop4): Can't find a valid FAT filesystem [ 687.755144][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.766541][T24462] FAT-fs (loop4): unable to read boot sector 05:10:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, 0x0) 05:10:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r4, 0x0) [ 688.315445][T24477] loop1: detected capacity change from 0 to 16 [ 688.323800][T24474] loop4: detected capacity change from 0 to 16 [ 688.337655][T24477] FAT-fs (loop1): invalid media value (0x00) [ 688.343927][T24477] FAT-fs (loop1): Can't find a valid FAT filesystem [ 688.352487][T24474] FAT-fs (loop4): invalid media value (0x00) [ 688.356666][T24481] loop5: detected capacity change from 0 to 4 05:10:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) close(r0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r4, 0x0) [ 688.359042][T24474] FAT-fs (loop4): Can't find a valid FAT filesystem [ 688.398844][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 05:10:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, 0x0) 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r4, 0x0) 05:10:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 688.413192][T24493] FAT-fs (loop4): unable to read boot sector 05:10:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 688.482536][T24505] loop1: detected capacity change from 0 to 16 [ 688.484492][T24507] loop4: detected capacity change from 0 to 16 [ 688.498861][T24505] FAT-fs (loop1): invalid media value (0x00) [ 688.505146][T24505] FAT-fs (loop1): Can't find a valid FAT filesystem [ 688.516574][T24507] FAT-fs (loop4): invalid media value (0x00) [ 688.522689][T24507] FAT-fs (loop4): Can't find a valid FAT filesystem [ 688.533631][T24519] loop5: detected capacity change from 0 to 4 [ 688.557950][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.571244][T24507] FAT-fs (loop4): unable to read boot sector 05:10:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, 0x0) 05:10:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[]) [ 689.191198][T24543] loop4: detected capacity change from 0 to 16 [ 689.195850][T24545] loop1: detected capacity change from 0 to 16 [ 689.207576][T24545] FAT-fs (loop1): bogus number of FAT sectors [ 689.209763][T24543] FAT-fs (loop4): invalid media value (0x00) [ 689.214597][T24545] FAT-fs (loop1): Can't find a valid FAT filesystem [ 689.223326][T24546] loop5: detected capacity change from 0 to 4 [ 689.227736][T24543] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x81) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) 05:10:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) 05:10:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) [ 689.308981][T24562] FAT-fs (loop4): invalid media value (0x00) [ 689.315044][T24562] FAT-fs (loop4): Can't find a valid FAT filesystem [ 689.324918][T24566] loop1: detected capacity change from 0 to 16 [ 689.339263][T24566] FAT-fs (loop1): bogus number of FAT sectors [ 689.345383][T24566] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) [ 689.378176][T24583] loop4: detected capacity change from 0 to 16 [ 689.378194][T24581] loop5: detected capacity change from 0 to 4 [ 689.390908][T24583] FAT-fs (loop4): invalid media value (0x00) [ 689.397582][T24583] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 05:10:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 689.434665][T24581] FAT-fs (loop5): bogus number of reserved sectors [ 689.435695][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 689.441230][T24581] FAT-fs (loop5): Can't find a valid FAT filesystem [ 689.452297][T24583] FAT-fs (loop4): unable to read boot sector [ 689.491445][T24600] loop4: detected capacity change from 0 to 16 [ 689.500790][T24600] FAT-fs (loop4): bogus number of FAT sectors [ 689.507229][T24600] FAT-fs (loop4): Can't find a valid FAT filesystem [ 689.507333][T24599] loop1: detected capacity change from 0 to 16 [ 689.567600][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 689.578962][T24599] FAT-fs (loop1): bogus number of FAT sectors [ 689.579025][T24600] FAT-fs (loop4): unable to read boot sector [ 689.585340][T24599] FAT-fs (loop1): Can't find a valid FAT filesystem 05:10:58 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x81) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 05:10:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[]) [ 690.034167][T24621] loop5: detected capacity change from 0 to 4 [ 690.045254][T24621] FAT-fs (loop5): bogus number of reserved sectors [ 690.052123][T24621] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 05:10:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[]) 05:10:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x1, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0xc, 0x2, @private1}]}, 0x50}}, 0x0) 05:10:58 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='K', 0x1}, {&(0x7f00000001c0)="db7de56c9fa1625cfee25fe1b8db5a", 0xf}], 0x2) [ 690.152601][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 690.163582][T24638] loop1: detected capacity change from 0 to 16 [ 690.170819][T24641] loop5: detected capacity change from 0 to 4 [ 690.172522][T24644] loop4: detected capacity change from 0 to 16 [ 690.185626][T24641] FAT-fs (loop5): bogus number of reserved sectors [ 690.192558][T24641] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000013c0)={0x2, {0x3, 0x0, 0x0, 0xc0}}) fchdir(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="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", 0xf6f, 0xfffffffffffffff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3}}) creat(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) preadv(r3, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000001200)=""/252, 0xfc}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f0000001440)=""/158, 0x9e}], 0x4, 0x5, 0x9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 05:10:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) [ 690.195057][T24644] FAT-fs (loop4): bogus number of FAT sectors [ 690.205459][T24644] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) [ 690.246490][ T879] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 690.246520][T24644] FAT-fs (loop4): unable to read boot sector [ 690.293379][T24669] loop1: detected capacity change from 0 to 16 [ 690.300677][T24670] loop5: detected capacity change from 0 to 4 [ 690.310649][T24670] FAT-fs (loop5): bogus number of reserved sectors [ 690.318735][T24670] FAT-fs (loop5): Can't find a valid FAT filesystem 05:10:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x1400000000000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:10:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) 05:10:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000013c0)={0x2, {0x3, 0x0, 0x0, 0xc0}}) fchdir(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="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", 0xf6f, 0xfffffffffffffff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3}}) creat(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) preadv(r3, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000001200)=""/252, 0xfc}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f0000001440)=""/158, 0x9e}], 0x4, 0x5, 0x9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) [ 690.893087][T24687] loop4: detected capacity change from 0 to 16 [ 690.902139][T24687] FAT-fs (loop4): bogus number of FAT sectors [ 690.908885][T24687] FAT-fs (loop4): Can't find a valid FAT filesystem 05:10:59 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[], 0x384) splice(r0, 0x0, r1, 0x0, 0x81, 0x0) 05:10:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 05:10:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f00000001c0)='\x00L', 0x2, 0x1a}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) 05:10:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000013c0)={0x2, {0x3, 0x0, 0x0, 0xc0}}) fchdir(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="e006dbf8d06e0c5a791c7df68781b9328ebf01d7fc60a03b7d89872cf0daf157e97300f3fcbcb3a581a8b1592ff223d051e54ea41ae6fbdd2f42a2959dbc353d4b8853da8fe2e6a887df112d1df182f261abfed540f11c3e5c07d4a7e6c7af8f745855acfb15b821013e8074e6f696193db2dd29fb137051c2a1aa17338c507e0272f0abd5218a5ab3779cfe6c581285920be53fa3aa121c53dbe383ad973179a9648fd3ca67f1c99f22b3d598cbbe09365d289845f4cf8165f2802f6e5074d4d0cf3d9a71dda66af50b5b95da4001ed42a4d15230c48272edf4ec9573abe67525efb3794e17be9f7d400f1aa167f0aa58a98bb2201646c82389ba048ae946f305317e04b2503f6f2eddc9200b61e2d261ebb1bd222741c30d892184119ecf14910e590ddcbc60545dc23587e48fea32c64c185be23188535c1fd8918f23a759697fb4a15a29657019bfe375c96229b0d95d360de41f055b6a0afad6246a9bea8a8fa8e4da5abe4f769b19842cde71a93df693e6dc19195e4816a708937f15105f7440fda25f01566281e6b418407f22aa34fb2575a8740d74c185fde68d51cf00f051afd145796e5838b58d33ba28ea8d4dccad2b7b5ddf8370fbddf3a7d5a688d7f56fa3909a6cb194c0b09475f28ce2e4daf2169f5537a933fe8a941dc0fd53baff9d6bc2fcc17e24e8a76af7b0f6bb33611d26e1fa60dfafb240442546905d1c29dc2ac06c5381e19a4e37c8a70a38f7786de9c786d05b790d779340c0ea16c229a807bd5577f163b24f0215801714efea961abc0e91f6883739ba017bf6a4f772773c8c5e947c704ee20fbf4ee38fd57e5d8cb600c5889b80b5fa9bc609b7b555067cf07a7f77e7018158de9d29aa8b66a5457b963cd9fec80a5f1d355a1d3ee990a28fbf9a06f96fd7fbb64f66f6ad185ae49d3c3098041784714d7ecbabfd0e8b085c51fbec85eea2ef687fb37bfec591a1ee83d5762ddf9b55e2499c42e2f9c8c2e49c5f1d04e4e1d48ac113586601f08313e25d0d5babf33de4f3f5fed390af14a0f909af45316be2a7a2520938faa2487ede509c61a8963f9b71595b4a062c8418ab9a8293854b0b032f7ced85b46fd0f942d2450111099eab9c78d97692e94a8f317cdcb60ee7b7952d028fe715596d8a2f426cdef925fae98aa506c76939add85b8bd206a3d8a0aaabd4a02fa9938d8355811d3675d9cb55b353150dda30adcb262ea251bb8b17dc6e27f46872782ebdb38709996b122027f22e3804984261a6d0f3fe0f85ac994950fba6359accc12be31bb9df8afefaa210b8e6aa4e72844a0d56f07c79e0e69afe5829e10af2aa0db7bb06e75b130d8a53094223e3a0ec5f3dfa7190b20b79c68c8693d6c8d5e2dc42e575c50c7760e99b20879964a34f856a44def310c434bd079d29faf8055889ad6dca344318f93477a3435ae8cbe8c1ed378851efdc506885ffa728f832a7e2f72e0a7d7079f3e1a9b753e2f558006a65f36606b2a57e90377f5cb469a8889fc7daafdb41a304789380bd8f85811c694cad675585631dabe046d968e48f1aa7393b3a8546e8fee63b09f0ca0bd353fad6d663b884ada1735feb4b8d7ac3f7349c81a8b0c94fcbd8c784ea1d117a368335a5ebbbe96e27a13e061e239ab3fe6f38c77c364840ae1540f5f219acd6591fbf5f8c07c199be49869f8e6407db29841096f17032737cada3b50d7fe787e3258d2fa20868b4f1aab4fe95a8c9281c829b16f8399a1129af20a9c47d666b65a17649dee49c082eb04f91ce9ff349418cb60249f6778111b288b29b37850062a9849af3b9d7338078e7f2a208eb89b96c97636568ec44be9a05c8e2a0f0bb1644411532ef5e4503b4f4021e54d3796ce2c7724f12f9ef8972863652ec647d4882a97620e147234ba7cb9cb9b731cefffbb9e90f10ecc5ff8f053b91e09469a7c641bbcebfd051eb2d63288fa539dbcc95cd1cd774c123583eec3962dd77c45228b07838b79881e5f9db576cff777f0565c6a183e4e0e358b24645ce875c488c5afa0acd1f0fe9eb5ae9e1259cac3a5aaea1dc9602e08def719c9cac6894b5a64fb3b3e8adfc4950ebd4981e7ff7164496ad96c90e1b88dce3d9ec022eea2aceed7699257ee6345b7aaac7df5f49279649bd2f2869e397ab3e68353b1c1277944ee2a77ec3d65e1c100bb294a62a300e1a648b814ecce4bdd482291685a9d7e8f76609f41774660b4a21989faa76d2975929b7db3f67bf2e9fd47b9c83f822fed627a66560d62dad9110af304bf2bc06f6f074ab63f94058c24b0ef6a1831990ec33423bfeec3d2e858ead6389123c4c9ff44c393f39c33295e5b70b85fd3946318933228a193fb490bd48edcb8600641a035f537a5a9df9797a98e6f28093e952132ef60948fe8f38f820aeb31677f0c596358f13070dd02663daab306fff35308404941baf81014f5de82a272b8be943d15b63b1fdc721186fbeb530fa2d9a7a3c9851b27d43291beaf70f9de1e99a06b4f2d06ebe944a9c6f9de08c35a34655a94937ea03a1e032ddf69a43f73cfca4e5d417b037520bbfc618317c2d0d559b490794e903bd8e71d217d2dfadc55a840e5e428f299d152bf4e6150515dc740da2089b7848956f7e30a21b8fcc39afb4d8709cdde2e8e03644abe6b54c55668b90e32d829679b83fb5ed17e22a3d85285098aa2843aad7334e704d544429808eb5273b97843d772798040cdefe6a1c0ea4d9461b79a3b13ac610355148ce830d9023409a9da645c415335018c07f8ea33b233ee2cf478d95738900431dbe3d318164f55f65f33b344ff37fe40c3c95024c5c79553e07bfed88c0c5a1eb7eb49abb0a12fc32e2c1fd6fdcbd2cafff93601bbf7d3296d5f67060b87e6ce56e4494108212df57a9ee347d94398dc78f51e8313f4c1877f3137dce8a5f2ef99e8caf57cd8113fa883ddf57e497289271a403321315af72dfa0685ed546bc0a7cb2d01e33dc29c38418c0f3d4455f2dac25313dca717e0ff4d3d8b46cbf2e076088925b5734733bfef8ebe8d85110e55b6fcb171132f966544e3b69cc72c0ba1334eb3144b01e8e4ef5f9cbed1bc426db83a9459067a257b2dc4ca334870501fd4043b50a391d492635c2e9f65c280e4fc573823b873adaf56990d20cd4d432506bc1e576222a1ffdcd1b42d713127f695d327ebaa42e23988920eb5a787c1e536e1f366fe69395f3977d36768b4ba24f98b7f90f846d9a2c5b3b9556ce3ec09851a78e12c8c530250def910f6c95e3d533dacaa0951aec27d0520e29c5a88dfcc0d6ecc65bfb9a79427165f9b18bb9e2e15e0bbb7f7edb1ca0ad9e0d1591562cebe09b83c593f29cfa8a5f6d7228a5a48267c3eea29abd0e20875dd4617b027401ce7b74b57520f026b1cf4eb0b76b04056d6673086cc547bebe0319547e1e3bf7b9d2abfb35b6f5c521523bab20851598424a74d3d9bca47aeae0e1f331a19be826b2e108b038c7310cefbfc4533eb1b119b452e71b062a5d796dd0aca87d75db5556afbe1db493351e7ee9efff11b778bb5a8f9e65d5f7301c8c902b573cfff8135ab951286b9bbf2224f83976e63a6112f87d8b6037472d5e8d6cc8d41a255d29da3aaa2213dff0716fe66e8fbd4f3b8ccacdf5970dbdba8179915289532107b43fbf00fb0e285c1f458d0ed2e522ff0d32651c99035966cb312b9b9c096d7c9d691eb8b2619c190f895c3ac491e98d079f18b55b68e80d5b43deda5896ea3993e9d6cdf944ab429e1c9761280b545c330ec78c2c68346df53b2e7ca956f8b35c3be88702f4022716a39b42e6f0c23e29cce85a6e14575d23f699f8b69c38e6b676269d975ed4646ebe254120ddc6cc26f1245f18a40c9fe579aeeeccb4c6430d70e9c52319fe164551bfe19204ed40f36788a9247202ce9feaf0a9aa1345a3aa000bae2db4cbf1fc09a7545232bfa93da3c25ca9db48e76357abfd3b73277e161c329ad4876c091755ea94d724e099df65617585187c70c37d43baa0e029112103ecf81595dbd9fd598ca4d1f3b153856ee3ee239398484779bd0a2d255342367c19f9b28d9bd79d42bd773deca22576adee8c52debcd8af66589afb5de2901b1968dee68075d79e6aaf73bd2ecac403337ff0ba2114fe50c8e140ee25cb2a49fa69c326a6aba6d3eeecb9368b3756bf17ba67631f94b0c523b82d9813dca2daad917b4d0a0fe2bd9169c19e5a1ea0a9a418c15aa57f5cc1421fa14495de95489aa6998008cabd6e34296659d0b934aa8179558a6bd7bd1a5fa53dffcefba6129f63be601a372321db96102fbfab88ed1ed3e46ad12fb5d1ddfdd8f5ee1be55b1eac7294700d54d7221bff3bec25403368044da0ffe4e577e80292124c0036ef8f237f29194e9beead6d43cb5859e56bb0a252ce0cc5f7658d84e3e0d1ebc4ad3fc00c5abf53ba6d40b334f16887653bb3077a30f9bbf965090a9192634acbffb158119f32cf2d4795d5e8584a996f5be90f00eca43bf7502fbd39c7df357e03c3347affe27d3343ded6b4251125d85daf1603c7800d77d8fe8989c3a408d5c0ddd06cc80038a43a215e7dbf81a0e342f363ede335186b269b6cc1578893b28a8072120506e71e7858a448ac98f112a31027d202b576c0f89db1d2bc5184156f93097b498d92ed61b6a18c2ec10c2573fbfad1d3b7785b1abad34cad68a562ff14bb6a433f359d74f71f1eb5bcba42d67f7ec416a10ff2ce8510e8b3023033b11c2d27679f15293636c99497008cf39d783847f12be7ed86df57175711fc03e6765fd00799fdc1010ce2d7169f7a2868709c6ae7a2a6b611193deea718e69d826d4edc019c03d34f4f9ee1b572fc2a316126de291ca392ab8b5076c8815bba7348e12495c77d3850dcd38e2c7832bbede7b1580e972bc5ad00e803d978545b5477a8c8906258aab99576c77566c97f83ae69224a85d8e80a93bc59dba212bcfdaad1496d590db6d6d50f2aef214c96e609702d34190438e65a98926d77c33a0c0cd34e79ae5b4aaee457e75ef4a8432d29fa6c9bdd3d57111ae3399f0a64e7d3057647dce29a36ed847c71a7cc094f0718d51510c29bf7e0949863b3945103dc7c19ffcde15e7e27f7ec6ab86d36dbb52a71b8923f5d3089dc74c96293a69f9201369962294f09c81df087d60299ea21b95bc9a1374fce9ffee4d8c53284d64714e231daf4f77ed92d1979dbcd59190686bbeedbe6827abb51e1b12db5a8ecb954e050f777b8914019cf1bce2167c76b169baf305abee2c6d5c0b460173de0fbaef30c17615198056035d96b60de8f0e5cf1d8c24c5cbdb3c326082bc032c931dcbf09551ab3207ee07b14a474126ea50caabeeda9515ee6930fd60925a050591a846f0fb24d4716bc0ebea4925020e923109bcf86253449386d1a8b66c96920fd96c36cd48278796f97a3bb40eea6da36f25a7df44ec0d25945d3fa3a7e93cf792bda1bf8e0135084dc44fba5a6f513044f1cb444a1561bd8c9a8bb3c83a66ebea6ba46252dbee62a69a28a6fb91a9a8dd30950da846ac49b6a9df07b6499fedc249e08d7d4c3c5be", 0xf6f, 0xfffffffffffffff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3}}) creat(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) preadv(r3, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000001200)=""/252, 0xfc}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f0000001440)=""/158, 0x9e}], 0x4, 0x5, 0x9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 05:10:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2002, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='msdos\x00', 0x3, 0x0) [ 690.955442][ T703] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 690.966714][T24687] FAT-fs (loop4): unable to read boot sector 05:10:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000013c0)={0x2, {0x3, 0x0, 0x0, 0xc0}}) fchdir(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="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", 0xf6f, 0xfffffffffffffff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x3}}) creat(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) preadv(r3, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000001200)=""/252, 0xfc}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f0000001440)=""/158, 0x9e}], 0x4, 0x5, 0x9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)