_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x80000003, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000080)={0x4}) 07:04:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x80000003, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000080)={0x4}) 07:04:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x80000003, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000080)={0x4}) 07:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x0) 07:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x0) 07:04:07 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 07:04:08 executing program 5: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000540)={0x19}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) read$ptp(r0, &(0x7f00000002c0)=""/232, 0xffffffd8) 07:04:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x200}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:04:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) 07:04:10 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9cc40cba9956d308b09ec705705eb547512a60cc65de7389b115b7ab1e7492070fcf9416cb54c8d1ce59d643bdd6f95afe13eb0fb3f18c", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) 07:04:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 07:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x0) 07:04:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x200}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:04:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) 07:04:10 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 07:04:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x200}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:04:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) 07:04:10 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) [ 243.406750][T14114] device lo entered promiscuous mode [ 243.423233][T14108] device lo left promiscuous mode [ 243.438311][T14114] device lo entered promiscuous mode [ 243.444186][T14108] device lo left promiscuous mode 07:04:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) 07:04:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 243.516946][T14136] device lo entered promiscuous mode [ 243.533011][T14129] device lo left promiscuous mode 07:04:13 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:13 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x200}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 07:04:13 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/power/resume_offset', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 07:04:13 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7ff}) 07:04:13 executing program 1: syz_mount_image$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x30, &(0x7f0000000180)={[{@mode={'mode', 0x2c}}]}) 07:04:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/power/resume_offset', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 07:04:13 executing program 4: r0 = epoll_create(0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_open_dev$vcsu(&(0x7f0000000340), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x10000000}) 07:04:13 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7ff}) [ 246.426687][T14157] device lo entered promiscuous mode [ 246.432059][T14159] device lo entered promiscuous mode [ 246.442250][T14161] ramfs: Bad value for 'mode' [ 246.453967][T14150] device lo left promiscuous mode [ 246.463784][T14153] device lo left promiscuous mode 07:04:13 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/power/resume_offset', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) [ 246.479412][T14165] ramfs: Bad value for 'mode' 07:04:13 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/power/resume_offset', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 07:04:13 executing program 1: syz_mount_image$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x30, &(0x7f0000000180)={[{@mode={'mode', 0x2c}}]}) 07:04:13 executing program 4: r0 = epoll_create(0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_open_dev$vcsu(&(0x7f0000000340), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x10000000}) 07:04:13 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7ff}) [ 246.539305][T14179] device lo entered promiscuous mode [ 246.559556][T14174] device lo left promiscuous mode 07:04:13 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) shmat(0x0, &(0x7f0000ff4000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) 07:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)="60dd2d8e869321c40cf89eba4de50735", 0x10) 07:04:13 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 07:04:13 executing program 4: r0 = epoll_create(0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_open_dev$vcsu(&(0x7f0000000340), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x10000000}) [ 246.595098][T14187] device lo entered promiscuous mode [ 246.614162][T14178] device lo left promiscuous mode [ 246.629652][T14191] ramfs: Bad value for 'mode' 07:04:13 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7ff}) 07:04:13 executing program 1: syz_mount_image$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x30, &(0x7f0000000180)={[{@mode={'mode', 0x2c}}]}) 07:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)="60dd2d8e869321c40cf89eba4de50735", 0x10) 07:04:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r0, 0x0, 0x0) 07:04:13 executing program 4: r0 = epoll_create(0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = syz_open_dev$vcsu(&(0x7f0000000340), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x10000000}) 07:04:13 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) 07:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x401c5820, &(0x7f0000000500)={0xff0f0000}) [ 246.706142][T14206] device lo entered promiscuous mode [ 246.734243][T14199] device lo left promiscuous mode [ 246.740664][T14213] ramfs: Bad value for 'mode' 07:04:13 executing program 1: syz_mount_image$nfs4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x30, &(0x7f0000000180)={[{@mode={'mode', 0x2c}}]}) 07:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)="60dd2d8e869321c40cf89eba4de50735", 0x10) 07:04:13 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) 07:04:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r0, 0x0, 0x0) 07:04:13 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_setup(0x7f06, &(0x7f0000000180), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eea000/0x1000)=nil, 0x1000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 246.836209][T14232] ramfs: Bad value for 'mode' 07:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)="60dd2d8e869321c40cf89eba4de50735", 0x10) 07:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x401c5820, &(0x7f0000000500)={0xff0f0000}) 07:04:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r0, 0x0, 0x0) 07:04:13 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) 07:04:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r0, 0x0, 0x0) 07:04:13 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_setup(0x7f06, &(0x7f0000000180), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eea000/0x1000)=nil, 0x1000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 07:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x401c5820, &(0x7f0000000500)={0xff0f0000}) 07:04:13 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) 07:04:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 07:04:13 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_setup(0x7f06, &(0x7f0000000180), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eea000/0x1000)=nil, 0x1000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 07:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x401c5820, &(0x7f0000000500)={0xff0f0000}) 07:04:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 07:04:13 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_setup(0x7f06, &(0x7f0000000180), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eea000/0x1000)=nil, 0x1000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 07:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 07:04:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 07:04:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$tcp_mem(r0, &(0x7f0000000180)={0xfffffffffffffffc}, 0x48) 07:04:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030080ffffff05000300020000000500030080ffffff0800020003"], 0x40}}, 0x0) 07:04:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 07:04:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$tcp_mem(r0, &(0x7f0000000180)={0xfffffffffffffffc}, 0x48) 07:04:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030080ffffff05000300020000000500030080ffffff0800020003"], 0x40}}, 0x0) 07:04:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x20) fcntl$setstatus(r0, 0x4, 0x0) 07:04:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$tcp_mem(r0, &(0x7f0000000180)={0xfffffffffffffffc}, 0x48) 07:04:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030080ffffff05000300020000000500030080ffffff0800020003"], 0x40}}, 0x0) 07:04:14 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 07:04:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$tcp_mem(r0, &(0x7f0000000180)={0xfffffffffffffffc}, 0x48) 07:04:14 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x410, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 07:04:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030080ffffff05000300020000000500030080ffffff0800020003"], 0x40}}, 0x0) 07:04:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x1924, &(0x7f0000000340)) close(r5) write(r4, &(0x7f0000000400)='L', 0x1) tee(r3, r2, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:04:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, 0x0) 07:04:14 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:14 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x410, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 07:04:14 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cb000066b38a0225dfc85f"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:04:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00e258d1285a989200018c"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 247.672764][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 247.672807][ C1] sd 0:0:1:0: tag#1809 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 247.689242][ C1] sd 0:0:1:0: tag#1809 CDB: opcode=0xe5 (vendor) [ 247.695594][ C1] sd 0:0:1:0: tag#1809 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 247.704661][ C1] sd 0:0:1:0: tag#1809 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 247.713807][ C1] sd 0:0:1:0: tag#1809 CDB[20]: ba [ 247.726523][ C1] sd 0:0:1:0: tag#1811 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 247.736454][ C1] sd 0:0:1:0: tag#1811 CDB: opcode=0xe5 (vendor) [ 247.742798][ C1] sd 0:0:1:0: tag#1811 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 247.752031][ C1] sd 0:0:1:0: tag#1811 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 247.761096][ C1] sd 0:0:1:0: tag#1811 CDB[20]: ba 07:04:15 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:15 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x410, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 07:04:15 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, 0x0) 07:04:15 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x1924, &(0x7f0000000340)) close(r5) write(r4, &(0x7f0000000400)='L', 0x1) tee(r3, r2, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:04:15 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:15 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x410, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 07:04:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, 0x0) 07:04:15 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 248.545903][ C0] sd 0:0:1:0: tag#1816 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 248.555963][ C0] sd 0:0:1:0: tag#1816 CDB: opcode=0xe5 (vendor) [ 248.562398][ C0] sd 0:0:1:0: tag#1816 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 248.571549][ C0] sd 0:0:1:0: tag#1816 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 248.580592][ C0] sd 0:0:1:0: tag#1816 CDB[20]: ba 07:04:15 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, 0x0) [ 248.631519][ C1] sd 0:0:1:0: tag#1823 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 248.641465][ C1] sd 0:0:1:0: tag#1823 CDB: opcode=0xe5 (vendor) [ 248.647849][ C1] sd 0:0:1:0: tag#1823 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 248.656910][ C1] sd 0:0:1:0: tag#1823 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 248.665956][ C1] sd 0:0:1:0: tag#1823 CDB[20]: ba 07:04:16 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:16 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:16 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x1924, &(0x7f0000000340)) close(r5) write(r4, &(0x7f0000000400)='L', 0x1) tee(r3, r2, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:04:16 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 249.401081][ C0] sd 0:0:1:0: tag#1837 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 249.410937][ C0] sd 0:0:1:0: tag#1837 CDB: opcode=0xe5 (vendor) [ 249.417336][ C0] sd 0:0:1:0: tag#1837 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 249.426383][ C0] sd 0:0:1:0: tag#1837 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 249.435432][ C0] sd 0:0:1:0: tag#1837 CDB[20]: ba 07:04:16 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) 07:04:16 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:16 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) unshare(0x400) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) [ 249.554556][ C0] sd 0:0:1:0: tag#1820 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 249.564424][ C0] sd 0:0:1:0: tag#1820 CDB: opcode=0xe5 (vendor) [ 249.570760][ C0] sd 0:0:1:0: tag#1820 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 249.579803][ C0] sd 0:0:1:0: tag#1820 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 249.588943][ C0] sd 0:0:1:0: tag#1820 CDB[20]: ba 07:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="230000001e0007041dfffd946f610500020000001f00000000000100050016000400ff", 0x23}], 0x1}, 0x0) 07:04:17 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:17 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x1924, &(0x7f0000000340)) close(r5) write(r4, &(0x7f0000000400)='L', 0x1) tee(r3, r2, 0x3, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:17 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff0204000300002000100200200000000000004000000000000000000069ff6414cb1010d8820dbbb6352252bc3160dd73a54383711d2cb34982a6", 0x42}], 0x2) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r5, 0x0, 0x631b, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 07:04:17 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="230000001e0007041dfffd946f610500020000001f00000000000100050016000400ff", 0x23}], 0x1}, 0x0) [ 250.305971][ C0] sd 0:0:1:0: tag#1828 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.315835][ C0] sd 0:0:1:0: tag#1828 CDB: opcode=0xe5 (vendor) [ 250.322166][ C0] sd 0:0:1:0: tag#1828 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 250.331213][ C0] sd 0:0:1:0: tag#1828 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 250.340252][ C0] sd 0:0:1:0: tag#1828 CDB[20]: ba 07:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="230000001e0007041dfffd946f610500020000001f00000000000100050016000400ff", 0x23}], 0x1}, 0x0) [ 250.402674][ C0] sd 0:0:1:0: tag#1830 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 250.412539][ C0] sd 0:0:1:0: tag#1830 CDB: opcode=0xe5 (vendor) [ 250.418899][ C0] sd 0:0:1:0: tag#1830 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 250.427938][ C0] sd 0:0:1:0: tag#1830 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 250.437037][ C0] sd 0:0:1:0: tag#1830 CDB[20]: ba 07:04:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="230000001e0007041dfffd946f610500020000001f00000000000100050016000400ff", 0x23}], 0x1}, 0x0) 07:04:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:17 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@loopback, @remote}, 0x10) 07:04:17 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:04:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@local}, 0x20) 07:04:17 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x4}) 07:04:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:18 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@local}, 0x20) 07:04:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@local}, 0x20) 07:04:18 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@loopback, @remote}, 0x10) 07:04:18 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x4}) 07:04:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x20}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 07:04:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@local}, 0x20) 07:04:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x0) 07:04:18 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x4}) 07:04:18 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@loopback, @remote}, 0x10) 07:04:18 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x0) 07:04:18 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@loopback, @remote}, 0x10) 07:04:18 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x0) 07:04:18 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:18 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x4}) 07:04:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x0) 07:04:19 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:19 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) remap_file_pages(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x286400) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x54}) 07:04:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000066000106000000109f00000000000000", @ANYRES32], 0x28}], 0x1}, 0x0) 07:04:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 07:04:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) 07:04:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0xb34, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) [ 252.308815][T14679] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.346091][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000066000106000000109f00000000000000", @ANYRES32], 0x28}], 0x1}, 0x0) 07:04:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x54}) 07:04:19 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 07:04:19 executing program 4: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) [ 252.463427][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.472736][T14709] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:04:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000066000106000000109f00000000000000", @ANYRES32], 0x28}], 0x1}, 0x0) 07:04:19 executing program 4: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x54}) 07:04:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 07:04:19 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 4: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000066000106000000109f00000000000000", @ANYRES32], 0x28}], 0x1}, 0x0) [ 252.614802][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.631184][T14741] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:04:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 07:04:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x54}) 07:04:19 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="66530700ae897094e7b126b097eaa769be114b654b499374a8db38f8c400fcffffffffffff45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9080000ede611747f2c514ec8fad68909f11b5e502375ed", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1, 0x0, 0xb}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:04:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) memfd_create(&(0x7f0000000180)='\xa0\xe5\xe3Y\xa8m\x04\xf6\x0e\x93U\xc5\xd6kg(\xdcb!\xaf\x92oz:1r\xd6\xbc6n', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x5007, 0x3b, 0xfffffffc, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4e03, 0x0, 0x2, 0x2df}) sendfile(r1, r1, 0x0, 0x24002da8) 07:04:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) [ 252.723097][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.744944][T14759] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:04:19 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x83071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0xc79, 0x31, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 07:04:19 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="66530700ae897094e7b126b097eaa769be114b654b499374a8db38f8c400fcffffffffffff45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9080000ede611747f2c514ec8fad68909f11b5e502375ed", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1, 0x0, 0xb}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:04:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) [ 252.809702][ C1] sd 0:0:1:0: tag#1831 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 252.819575][ C1] sd 0:0:1:0: tag#1831 CDB: opcode=0xe5 (vendor) [ 252.825938][ C1] sd 0:0:1:0: tag#1831 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 252.835011][ C1] sd 0:0:1:0: tag#1831 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 252.844049][ C1] sd 0:0:1:0: tag#1831 CDB[20]: ba 07:04:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) memfd_create(&(0x7f0000000180)='\xa0\xe5\xe3Y\xa8m\x04\xf6\x0e\x93U\xc5\xd6kg(\xdcb!\xaf\x92oz:1r\xd6\xbc6n', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x5007, 0x3b, 0xfffffffc, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4e03, 0x0, 0x2, 0x2df}) sendfile(r1, r1, 0x0, 0x24002da8) 07:04:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 07:04:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) [ 252.933390][ C1] sd 0:0:1:0: tag#1832 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 252.943356][ C1] sd 0:0:1:0: tag#1832 CDB: opcode=0xe5 (vendor) [ 252.949701][ C1] sd 0:0:1:0: tag#1832 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 252.958823][ C1] sd 0:0:1:0: tag#1832 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 252.967976][ C1] sd 0:0:1:0: tag#1832 CDB[20]: ba 07:04:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xe07b, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 07:04:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) memfd_create(&(0x7f0000000180)='\xa0\xe5\xe3Y\xa8m\x04\xf6\x0e\x93U\xc5\xd6kg(\xdcb!\xaf\x92oz:1r\xd6\xbc6n', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x5007, 0x3b, 0xfffffffc, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4e03, 0x0, 0x2, 0x2df}) sendfile(r1, r1, 0x0, 0x24002da8) 07:04:19 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="66530700ae897094e7b126b097eaa769be114b654b499374a8db38f8c400fcffffffffffff45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9080000ede611747f2c514ec8fad68909f11b5e502375ed", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1, 0x0, 0xb}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 252.989791][ C1] sd 0:0:1:0: tag#1833 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 252.999832][ C1] sd 0:0:1:0: tag#1833 CDB: opcode=0xe5 (vendor) [ 253.006196][ C1] sd 0:0:1:0: tag#1833 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 253.015548][ C1] sd 0:0:1:0: tag#1833 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 253.024692][ C1] sd 0:0:1:0: tag#1833 CDB[20]: ba 07:04:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 07:04:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xe07b, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 07:04:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) [ 253.103141][ C0] sd 0:0:1:0: tag#1834 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 253.113158][ C0] sd 0:0:1:0: tag#1834 CDB: opcode=0xe5 (vendor) [ 253.119608][ C0] sd 0:0:1:0: tag#1834 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 253.128685][ C0] sd 0:0:1:0: tag#1834 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 253.137823][ C0] sd 0:0:1:0: tag#1834 CDB[20]: ba 07:04:20 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) memfd_create(&(0x7f0000000180)='\xa0\xe5\xe3Y\xa8m\x04\xf6\x0e\x93U\xc5\xd6kg(\xdcb!\xaf\x92oz:1r\xd6\xbc6n', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x5007, 0x3b, 0xfffffffc, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4e03, 0x0, 0x2, 0x2df}) sendfile(r1, r1, 0x0, 0x24002da8) 07:04:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xe07b, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 07:04:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 07:04:20 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000640)="66530700ae897094e7b126b097eaa769be114b654b499374a8db38f8c400fcffffffffffff45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9080000ede611747f2c514ec8fad68909f11b5e502375ed", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1, 0x0, 0xb}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 253.219342][ C1] sd 0:0:1:0: tag#1835 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 253.229771][ C1] sd 0:0:1:0: tag#1835 CDB: opcode=0xe5 (vendor) [ 253.236252][ C1] sd 0:0:1:0: tag#1835 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 253.245306][ C1] sd 0:0:1:0: tag#1835 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 253.254372][ C1] sd 0:0:1:0: tag#1835 CDB[20]: ba 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xe07b, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 07:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 07:04:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:21 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="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", 0x1b3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 07:04:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000f35000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000003c0)={0x20010080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/208, 0xd0, &(0x7f0000000300)=""/106, &(0x7f0000000380)}, 0x58) close(r1) splice(r0, &(0x7f0000000440)=0x1000000000b32, r0, &(0x7f0000000480)=0x4, 0x286, 0xdffc42c660f1fe90) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f000086c000/0x6000)=nil, 0x6000, &(0x7f00000000c0)=""/42) mremap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="73797a300a893820a86db173bd9ee0ff5508c373a9250c932f62e78c1b3d27052538e25b31fe69018850658a380a01b0533e30303a1149b70e6ff015b7cdb754b1851ec489d3b54e450f5688b51c7b00000000c5789f20ecb21f60b7a84e9548ca962955795028d987a4bc444a45ac64a2deaa564893007378b2f70c08bc45d00428a39015576ce52587cd07110c37171fa3270008d17a5cf8e9510885f3043ac2ae02aede7397af8592d8fd65d13a1e9f426374d527ba91a8b5a91cf820c62c9f8e5d7244d58c6ce0927d26e1773d75883e773db5271be42461d4a15316"], 0x7e) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)="73ffb233418bcaa90f8915fca73b6725415f0686203f1f635b26beb4045ac93f6cc326c129f575262c0b2b17aa6e7019e8404e534adadf6202b183f2149f5d906fc1f1ec5a9ce8414dca7a7e84a1b914d6c02ba4cc30f4d1f0ede37fade9b7342632579217ca0e0d2a1786fc94555bfdd2fd116b977f3fd51f2f30ad", 0x7c}, {&(0x7f0000000540)="9dcb7e464d5786", 0x7}, {&(0x7f0000000580)="9569b1e01d481c8269e508a243a48205201c844a82c296ca8144558adab7017b0518b8dc55611d278b628140a1e79934d085523e2d165586b5edb61708e7669e9f28e7a0425b4959224bb5b924b9c4c8a2b2f81bb5d764b10d1aca982d83d64d8b8880a19c5bea6774c15898f0db104d73bfd13199c7b67fcdb4eae26975165df4", 0x81}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 07:04:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffff8a}) 07:04:21 executing program 5: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) [ 254.622692][T15054] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:04:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 3: unshare(0x44000400) r0 = socket(0x2, 0x803, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 07:04:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffff8a}) 07:04:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 07:04:21 executing program 5: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) [ 254.741643][T15073] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:04:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:22 executing program 3: unshare(0x44000400) r0 = socket(0x2, 0x803, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 07:04:22 executing program 5: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) 07:04:22 executing program 4: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) 07:04:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffff8a}) 07:04:22 executing program 1: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) 07:04:22 executing program 5: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) 07:04:22 executing program 4: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) 07:04:22 executing program 3: unshare(0x44000400) r0 = socket(0x2, 0x803, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 07:04:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffff8a}) 07:04:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 255.423626][T15112] SELinux: duplicate or incompatible mount options [ 255.437166][T15113] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.457610][T15127] SELinux: duplicate or incompatible mount options 07:04:22 executing program 1: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) [ 255.540964][T15140] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.555724][T15151] SELinux: duplicate or incompatible mount options 07:04:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:23 executing program 4: setreuid(0xee00, 0x0) setreuid(0xffffffffffffffff, 0xee00) setreuid(0xee00, 0x0) 07:04:23 executing program 3: unshare(0x44000400) r0 = socket(0x2, 0x803, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 07:04:23 executing program 0: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) 07:04:23 executing program 1: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) 07:04:23 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="75250308b0a9d3fd0fa290733c64ec79dfa598578b2bc527333fab5857e5e0f9f0cad1812c71230343cef365ddcd15da687856960fdaaef26c31aaa54dfa9115e6537138a000bb81a4e291b25e65950a73a18a91adf7102e43e6c10ac9016a910c462f2367bd8f67ffcaa1f3b8e11da00dfd2eced2e556774012e237b0c64be9c00f2f375946c2b5e08114a1f3e86fdb5105493656694c8682572a71f16dc27f3a589ad21b10084023d741065803564bf38e0887b03142ffc7c179ff83d636579e6e8114763ce3eaf938932bc4b9bd04cc63f122abc924ac22fb5e3c202d5d836fcdb5963c84bd7a6a42fd8e66f15c39cacd8f254055fea7685b8f290f07ef71c78781583f7bce3b4f13f0be8780759387f045b594fc4c836efd2803ae61035415718422bff9db3b6beea8825df5280d6dc0483f2a3f2ca4d2368534fafbe29aa8c4235c17f85c03344e6b7b7c3d41442519c9a476dc6ed6cce2c23130a376e258c0b92d5e8730a15ce93e9d14a2c74c08e42745eb1c464f4a2b12b667548eb0232b86db6670ed417b54ae5691ee95cff60abc346a6ca2d7c3b9d326386f85ccc52f87f02e9fe810c50a526738993259995890b56e6a92afe23ba912559d2ffe068112c011b5b62f7e894a7a7c2e0e1f5be25efe69e0d2a02c15fe4c1d7e611e0de57c9ed35edaf911b7935648fb2bae75de77b645b31494c8b98275ae944b5b4458110edb136cfe1a9873e6b0dc077d8d03126868a62d723ea97f19ae1c8f91521f14c5c6b42757644c1d2fe57bd9a806ea01165740d0ce8e076394b032f4eceb7b4b3dffce3b985d1f72e53a09d18c15511ace15d7ee2c00078dc4c97b8cb66a2921794d49da7d795c56ff961d1c5587f118455923af63e008419683f59cb817d96553b70f208a1d3d91ef847c2ef6287ac296b615625a7325f9fc5023037c2368425c3525ee47ba556c328cce79f86d50c034e73ece2cf787141b68a32b3f9fc97bf872fed1917a832f61f4723d3cfb3550e4a5672df74261c0fb41c718cf2e8a19b7452b96b22141b6f1358c59b323561bd20820e55c513c2885c40a7b650610b093c64ef4376c0abfdb7904e03ee94cdfc1401d1333c09498f7bde633a5eb0e1789a54b9126abd2d444d26b215bf44441c08feb604952c2893d5c42fe4875bb813d9a15ba3a108b96c9860d6cbeba7aa18c93fe76a4f3ec4981ed2a7b981396a95949e3133e3ff1c514453f0f14a7afdeb6759acd487ba26004609a7132c60c13d83e345f1b51898b9f8bab0209785f188f93e4b3f3c0a3728ceb6717d6bb4bd6d98f131897a8dfa1753a92682995ec0cb838a4fcba2a7c879cd502b0d2b8277e1fbc18e02b15362529be30ef3323c60e6615b94d1bbd8c3a97b6822361688210b65493a9a84bf0b752e9d6970fd9eabf8324e702596cf567ee60ba581fe2aa474972f131ab67a3a3611ef66414bd97c51ffd58fed773151c1478a903e6c0fb0cf177f64c91bd0b0f1425cc058f874a0d806a77ecbd3ba91ff2c233892f4170e3151f69e47201e619d13988f17427ed71c7f1aeaa83f49301455ed168b016cb897c9f00fd903d67d3f95ef4a7099c26ff1100775651e7bf0a7430d4d06133bc75a56b9cf1319599d146803943771dc8226b180e02ed22b41e3cd17f98ed85c49d185ecf7c10123389ad96bcf32c27d51aebb07d3f199e35a36af1c649d252b7655a0213217517807b1db9f25738c3d06cd7436c7bc13357cca81e5ae8060c891ac67635436b594e7cbf14e4794cdb2a18c7ccb7ed1dce44ed0876ed53bb771c47f5a9122fbcafd828f3bcdab2c66fa2df2f88401d28327cbe0b05493504dd398f371dcfea785aa3771187b6e6fe1b10e0b258a5ee8ff37e0650dc3e9b3319a10252ab012a0efef19a547e1ce6ad865c43ec3505c635af2a6bdddcb4edf784d7803815e6e6168db36f7b4a3e0f52fcf68dc999b234bd25d55e90df92999318b4b0a55d929d0123bc03dddf5230c4a6757d0490cce643f41fd62e897f82b8329e05bd80d2491279b87ea4493e3e526826503016d47470fd5bb476d7115507c3d12f63cfc3bc7f0b644ae8a900dbf081316edbf4cf5b9d187784dcb82a241e44d7a8ab0ba287cd4abef65854216461652419aeaa2a28040fcbda67262bbb3497b104a8dae54e96fc6fba279ade17e9a784d58099a5cd59383674fef56dac6beeedc19b47696b335e57a57d3bf47c59cbeca0a5f06beba704953a2d93ab174f802cc73545024e397faad1f027744d751ed925263aae5a960466e0fb0ed73bc857cda6b5dd66b02dd9528c89d441c8ab8f4af77e9113bd5a2caac8e8244d24cf4d09e705c0e644f1c835ea845ce42121dd25341a1c4a4fd9aa43aec51069817135898b9d6d753ee7290df010b67af3a9a6a466f76c2b563da67afddc75b2ee551ef1a2f0301465b1d8d155136b7e1af22ec3e330da2515a33f16d87bbd7a620eadf6d7d978e500f036e9bd0516fba241e66742c1ba0d90a98268fac8d8ed0ee926023c777d273b3b37997870241a58e30ab19db4261affedcca0d9aceee3b06aa00dded793bb1be4d9b4542ef04da5703c5bc40507c32a9f8a2b00c4d724fb88e2e5b216da33d744f681544e120df7f27a99f394ec331f1c7e6db347de7a2fc49266cece39696a0a6e2c5a9dd5c19eaa6b36fd2ff6fb8fe2aa985e91d30a45a5e41e81144d7b8c18fda4bb509e0a4b40e02ebb40aaae753770cf85c7c2f8183ac2df77e01c46584ecb45972de2f71607ce7876c0a234abee1195ebcdc4a471788127dc7cdd5241e4f115f5471b8504eb4cacba3ca264d18a87376234a5051232a6de6840c27826395f42f3b8cded3e09842afb68a65e29f50f0d18468498b4d4dfeb24c39403200a62000d44061640760f7733534bf2983897ec104f827a221cb43a156c78e2990a51168983adc9d4329b0fe8d2a7ee58345c5e910c59146bea47e506d0a78e90755d808355e53b8661adfb945d400338e710d1e97a7ace428fa37e42ce793bca1c8b39944d25f564d74967e6687406c2a340e32a500a822c8c982dd24498622eee3a50159a864f63109284c47280382391ad37d14ffbb55acc6ca7630143f8e7f5e241c0ad3b106d3714e706b28e77dc5db5ac40a5041dc06ed5742d5327536284419d1ebf0e8c4f00c278a56d909bad6e8ebafd1a953f5552f434b17a22e6569abf71bbbe19c626f058daf9848b1252d17c0d0804214f5f73930fc769dde4465202001dcfc177425a7946e390eeea41c68460dd82f6f46b5e68b2676468b1a3700aecff7bce9d6c50df976aef928e85d921299146fe0fd8812973e960b8a8df8f1e1a63a708fb5551518aa6c0dd383812dd58485b42f425ac64ea7312857b3f6f8089420e94d2b24c40403368e8782896bc65e58331d65f04e4273f7a2390eb9b5795121a9db0f269e75d32d908c201b8193a14ecbf81d845f6449a9fa6587d1a120186e45cf3a8d466603b50346214666295899e286bd4ff9de3b63f1bf9814b890f491566a3c82ba5d2a3234eb7360c1c9f2ff1c95432331f448df2e81cb3ab124a0a9b25e0803580b0745b29981ec66945387eb73200e9d0d0bb16cbe3601d16133aeafc38562dec09d06a9d88d358e8edcee27332f0c38255c2c1e330ce32dc7aa8f808fbdfb70a22ee0ac8393c2ba76c20a480e1d0122f48d82c68b8c7e41b14e15e343c185cac24db8fbfe19def9d3661e73fbcd0353d764e3ac4fe429a13ea9c4e72826b3524973ebf041db4d65b90d9c488b7ef678756adab4a82837aac45e8924c0508fb14cdfae6687cc448f9e8a16b2e099a3a4fee2dda6898385f389d8ffa2846e286418aa2dba2de3f8debfc7c00b39f824b52a82eb58bfe7e9f9ff7e2af948c421d67844b2a46dd9cc12eb45f53979330605977173c857ca5705c313ab5412c64c4b8e4b60e2b0cad61e3e49a06517fadecdde3b1b754118e00082af2748e246915d1d6824a8da84116ca56b93f07bca72ba2195df7bdff0d14f606addc6fc233b33c27c3525c909e5decd9943d385d4ed4ecbc9d11f11fd4fb9c632b3a6aa7d129ed29cd633fba8a44f2241903ad93b0ab6c748db87406349fefba05225f81174a7b20063d2505c4c7fbf16d9343dee1d3e78bfba670a88ebec25a0ba862f407cffff1463f3ad05ba4a33d8ce6a22487316efe2eb28e480be2625c90aa67845becc5f5ae0b13a0ab15b881f9d2ef4ef24770b49c2856e24dbf172d0a10d365ecc38c8511172eb4953b04847a1485f3912745a6fe6eba3179f45640cffc048afd18bd8b511fff8735bfab711efa361a725b0952835d66a926c06269c8f7f9f953144d1933e61a6877f09591c81adf632407f887159e440ef3cb25136c20e3cfe84dfe463cabaef40c29b426f87631a1f653f7ca1aac6f103bb0a7f775ba1eb893ce846017c7a90fe53e41d5e2e26c6b91a1f9a93f9847a0d8a0572d0e153c04c19cb53cdf2b41475f1c8dbd9d79554f459a9f3ee2ea6df338a042a3e9758f2296ecf6d695c4e0acd3362be3ff8c8932073717d71eaef801b477b9859cc023bb8134564a8eee932b37a819c444cf6738b9986213307309553bbe0055cf6b555a8316deaf74a1450ab8a950f0f292c8c2cc731939315b9ab22e4181ed17c7198eefa5f43f8d67eb7f7a73ddf8acfe069ec44c06eb66bab737e66d5c3b6b474019a0b4e5ac2d263ba63611bcde697b967c45a6bd7bcebfe5990816e878415ca622818c8b43b25b7ce0d0227f846704b3133041c41582c2285464685beedb3aa39666ae38aed846b81d711e9442fec739cca571b236186cd83710ee68344a7006d68062777cf3cc4188b6a2f7116c16d1e43063b612349d2b4e5c56233b9a0c3b890282c162913e7b0c51247ad6e022d3ddf782a894e786e3b4a8709a561d69345a5bf461e43b5d698245a79bd2894a54d467eda9e30302f4c8cb27631fe7a3517f8235b969505578ce1d36b06de81349362e6ba2da55e449d4c97b045c985587cf91cb645f786b2bf556d27f0dd4b9eba1c05ea423f21caff662ddd06da31482618a8941b5f6795a634d9fef550d5b953361116982d4840889664e3fc6ef3de1823fd22bce92fd737ad50d9a638dc650374ac6338ab26d8df5d527634f816b8eb02beecd1635814a5d1310da7ae8125416f17001bb0b3fefdfddd4885d39f8c08de0f28be61d33d54f28a580314f2ad42bde78ea8d1a38db3553dbb6643150e6b9312ea9f3bee3913778107c1bb1ccae32ddf94cdc0f004fb6bcf91cef91ffdb67ac7ce2c05b9196c9f3e9467c388ad4c6fc559ea07d83fd42239dd4aae7c64e16711c29880e444a54e459e500983cf2971922749b53be49b06f5fd999e37835df232541379e35911d0af45e03e922878e07", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:23 executing program 1: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) 07:04:23 executing program 0: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) [ 256.296120][T15170] SELinux: duplicate or incompatible mount options [ 256.298861][T15171] SELinux: duplicate or incompatible mount options 07:04:23 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:23 executing program 3: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="75250308b0a9d3fd0fa290733c64ec79dfa598578b2bc527333fab5857e5e0f9f0cad1812c71230343cef365ddcd15da687856960fdaaef26c31aaa54dfa9115e6537138a000bb81a4e291b25e65950a73a18a91adf7102e43e6c10ac9016a910c462f2367bd8f67ffcaa1f3b8e11da00dfd2eced2e556774012e237b0c64be9c00f2f375946c2b5e08114a1f3e86fdb5105493656694c8682572a71f16dc27f3a589ad21b10084023d741065803564bf38e0887b03142ffc7c179ff83d636579e6e8114763ce3eaf938932bc4b9bd04cc63f122abc924ac22fb5e3c202d5d836fcdb5963c84bd7a6a42fd8e66f15c39cacd8f254055fea7685b8f290f07ef71c78781583f7bce3b4f13f0be8780759387f045b594fc4c836efd2803ae61035415718422bff9db3b6beea8825df5280d6dc0483f2a3f2ca4d2368534fafbe29aa8c4235c17f85c03344e6b7b7c3d41442519c9a476dc6ed6cce2c23130a376e258c0b92d5e8730a15ce93e9d14a2c74c08e42745eb1c464f4a2b12b667548eb0232b86db6670ed417b54ae5691ee95cff60abc346a6ca2d7c3b9d326386f85ccc52f87f02e9fe810c50a526738993259995890b56e6a92afe23ba912559d2ffe068112c011b5b62f7e894a7a7c2e0e1f5be25efe69e0d2a02c15fe4c1d7e611e0de57c9ed35edaf911b7935648fb2bae75de77b645b31494c8b98275ae944b5b4458110edb136cfe1a9873e6b0dc077d8d03126868a62d723ea97f19ae1c8f91521f14c5c6b42757644c1d2fe57bd9a806ea01165740d0ce8e076394b032f4eceb7b4b3dffce3b985d1f72e53a09d18c15511ace15d7ee2c00078dc4c97b8cb66a2921794d49da7d795c56ff961d1c5587f118455923af63e008419683f59cb817d96553b70f208a1d3d91ef847c2ef6287ac296b615625a7325f9fc5023037c2368425c3525ee47ba556c328cce79f86d50c034e73ece2cf787141b68a32b3f9fc97bf872fed1917a832f61f4723d3cfb3550e4a5672df74261c0fb41c718cf2e8a19b7452b96b22141b6f1358c59b323561bd20820e55c513c2885c40a7b650610b093c64ef4376c0abfdb7904e03ee94cdfc1401d1333c09498f7bde633a5eb0e1789a54b9126abd2d444d26b215bf44441c08feb604952c2893d5c42fe4875bb813d9a15ba3a108b96c9860d6cbeba7aa18c93fe76a4f3ec4981ed2a7b981396a95949e3133e3ff1c514453f0f14a7afdeb6759acd487ba26004609a7132c60c13d83e345f1b51898b9f8bab0209785f188f93e4b3f3c0a3728ceb6717d6bb4bd6d98f131897a8dfa1753a92682995ec0cb838a4fcba2a7c879cd502b0d2b8277e1fbc18e02b15362529be30ef3323c60e6615b94d1bbd8c3a97b6822361688210b65493a9a84bf0b752e9d6970fd9eabf8324e702596cf567ee60ba581fe2aa474972f131ab67a3a3611ef66414bd97c51ffd58fed773151c1478a903e6c0fb0cf177f64c91bd0b0f1425cc058f874a0d806a77ecbd3ba91ff2c233892f4170e3151f69e47201e619d13988f17427ed71c7f1aeaa83f49301455ed168b016cb897c9f00fd903d67d3f95ef4a7099c26ff1100775651e7bf0a7430d4d06133bc75a56b9cf1319599d146803943771dc8226b180e02ed22b41e3cd17f98ed85c49d185ecf7c10123389ad96bcf32c27d51aebb07d3f199e35a36af1c649d252b7655a0213217517807b1db9f25738c3d06cd7436c7bc13357cca81e5ae8060c891ac67635436b594e7cbf14e4794cdb2a18c7ccb7ed1dce44ed0876ed53bb771c47f5a9122fbcafd828f3bcdab2c66fa2df2f88401d28327cbe0b05493504dd398f371dcfea785aa3771187b6e6fe1b10e0b258a5ee8ff37e0650dc3e9b3319a10252ab012a0efef19a547e1ce6ad865c43ec3505c635af2a6bdddcb4edf784d7803815e6e6168db36f7b4a3e0f52fcf68dc999b234bd25d55e90df92999318b4b0a55d929d0123bc03dddf5230c4a6757d0490cce643f41fd62e897f82b8329e05bd80d2491279b87ea4493e3e526826503016d47470fd5bb476d7115507c3d12f63cfc3bc7f0b644ae8a900dbf081316edbf4cf5b9d187784dcb82a241e44d7a8ab0ba287cd4abef65854216461652419aeaa2a28040fcbda67262bbb3497b104a8dae54e96fc6fba279ade17e9a784d58099a5cd59383674fef56dac6beeedc19b47696b335e57a57d3bf47c59cbeca0a5f06beba704953a2d93ab174f802cc73545024e397faad1f027744d751ed925263aae5a960466e0fb0ed73bc857cda6b5dd66b02dd9528c89d441c8ab8f4af77e9113bd5a2caac8e8244d24cf4d09e705c0e644f1c835ea845ce42121dd25341a1c4a4fd9aa43aec51069817135898b9d6d753ee7290df010b67af3a9a6a466f76c2b563da67afddc75b2ee551ef1a2f0301465b1d8d155136b7e1af22ec3e330da2515a33f16d87bbd7a620eadf6d7d978e500f036e9bd0516fba241e66742c1ba0d90a98268fac8d8ed0ee926023c777d273b3b37997870241a58e30ab19db4261affedcca0d9aceee3b06aa00dded793bb1be4d9b4542ef04da5703c5bc40507c32a9f8a2b00c4d724fb88e2e5b216da33d744f681544e120df7f27a99f394ec331f1c7e6db347de7a2fc49266cece39696a0a6e2c5a9dd5c19eaa6b36fd2ff6fb8fe2aa985e91d30a45a5e41e81144d7b8c18fda4bb509e0a4b40e02ebb40aaae753770cf85c7c2f8183ac2df77e01c46584ecb45972de2f71607ce7876c0a234abee1195ebcdc4a471788127dc7cdd5241e4f115f5471b8504eb4cacba3ca264d18a87376234a5051232a6de6840c27826395f42f3b8cded3e09842afb68a65e29f50f0d18468498b4d4dfeb24c39403200a62000d44061640760f7733534bf2983897ec104f827a221cb43a156c78e2990a51168983adc9d4329b0fe8d2a7ee58345c5e910c59146bea47e506d0a78e90755d808355e53b8661adfb945d400338e710d1e97a7ace428fa37e42ce793bca1c8b39944d25f564d74967e6687406c2a340e32a500a822c8c982dd24498622eee3a50159a864f63109284c47280382391ad37d14ffbb55acc6ca7630143f8e7f5e241c0ad3b106d3714e706b28e77dc5db5ac40a5041dc06ed5742d5327536284419d1ebf0e8c4f00c278a56d909bad6e8ebafd1a953f5552f434b17a22e6569abf71bbbe19c626f058daf9848b1252d17c0d0804214f5f73930fc769dde4465202001dcfc177425a7946e390eeea41c68460dd82f6f46b5e68b2676468b1a3700aecff7bce9d6c50df976aef928e85d921299146fe0fd8812973e960b8a8df8f1e1a63a708fb5551518aa6c0dd383812dd58485b42f425ac64ea7312857b3f6f8089420e94d2b24c40403368e8782896bc65e58331d65f04e4273f7a2390eb9b5795121a9db0f269e75d32d908c201b8193a14ecbf81d845f6449a9fa6587d1a120186e45cf3a8d466603b50346214666295899e286bd4ff9de3b63f1bf9814b890f491566a3c82ba5d2a3234eb7360c1c9f2ff1c95432331f448df2e81cb3ab124a0a9b25e0803580b0745b29981ec66945387eb73200e9d0d0bb16cbe3601d16133aeafc38562dec09d06a9d88d358e8edcee27332f0c38255c2c1e330ce32dc7aa8f808fbdfb70a22ee0ac8393c2ba76c20a480e1d0122f48d82c68b8c7e41b14e15e343c185cac24db8fbfe19def9d3661e73fbcd0353d764e3ac4fe429a13ea9c4e72826b3524973ebf041db4d65b90d9c488b7ef678756adab4a82837aac45e8924c0508fb14cdfae6687cc448f9e8a16b2e099a3a4fee2dda6898385f389d8ffa2846e286418aa2dba2de3f8debfc7c00b39f824b52a82eb58bfe7e9f9ff7e2af948c421d67844b2a46dd9cc12eb45f53979330605977173c857ca5705c313ab5412c64c4b8e4b60e2b0cad61e3e49a06517fadecdde3b1b754118e00082af2748e246915d1d6824a8da84116ca56b93f07bca72ba2195df7bdff0d14f606addc6fc233b33c27c3525c909e5decd9943d385d4ed4ecbc9d11f11fd4fb9c632b3a6aa7d129ed29cd633fba8a44f2241903ad93b0ab6c748db87406349fefba05225f81174a7b20063d2505c4c7fbf16d9343dee1d3e78bfba670a88ebec25a0ba862f407cffff1463f3ad05ba4a33d8ce6a22487316efe2eb28e480be2625c90aa67845becc5f5ae0b13a0ab15b881f9d2ef4ef24770b49c2856e24dbf172d0a10d365ecc38c8511172eb4953b04847a1485f3912745a6fe6eba3179f45640cffc048afd18bd8b511fff8735bfab711efa361a725b0952835d66a926c06269c8f7f9f953144d1933e61a6877f09591c81adf632407f887159e440ef3cb25136c20e3cfe84dfe463cabaef40c29b426f87631a1f653f7ca1aac6f103bb0a7f775ba1eb893ce846017c7a90fe53e41d5e2e26c6b91a1f9a93f9847a0d8a0572d0e153c04c19cb53cdf2b41475f1c8dbd9d79554f459a9f3ee2ea6df338a042a3e9758f2296ecf6d695c4e0acd3362be3ff8c8932073717d71eaef801b477b9859cc023bb8134564a8eee932b37a819c444cf6738b9986213307309553bbe0055cf6b555a8316deaf74a1450ab8a950f0f292c8c2cc731939315b9ab22e4181ed17c7198eefa5f43f8d67eb7f7a73ddf8acfe069ec44c06eb66bab737e66d5c3b6b474019a0b4e5ac2d263ba63611bcde697b967c45a6bd7bcebfe5990816e878415ca622818c8b43b25b7ce0d0227f846704b3133041c41582c2285464685beedb3aa39666ae38aed846b81d711e9442fec739cca571b236186cd83710ee68344a7006d68062777cf3cc4188b6a2f7116c16d1e43063b612349d2b4e5c56233b9a0c3b890282c162913e7b0c51247ad6e022d3ddf782a894e786e3b4a8709a561d69345a5bf461e43b5d698245a79bd2894a54d467eda9e30302f4c8cb27631fe7a3517f8235b969505578ce1d36b06de81349362e6ba2da55e449d4c97b045c985587cf91cb645f786b2bf556d27f0dd4b9eba1c05ea423f21caff662ddd06da31482618a8941b5f6795a634d9fef550d5b953361116982d4840889664e3fc6ef3de1823fd22bce92fd737ad50d9a638dc650374ac6338ab26d8df5d527634f816b8eb02beecd1635814a5d1310da7ae8125416f17001bb0b3fefdfddd4885d39f8c08de0f28be61d33d54f28a580314f2ad42bde78ea8d1a38db3553dbb6643150e6b9312ea9f3bee3913778107c1bb1ccae32ddf94cdc0f004fb6bcf91cef91ffdb67ac7ce2c05b9196c9f3e9467c388ad4c6fc559ea07d83fd42239dd4aae7c64e16711c29880e444a54e459e500983cf2971922749b53be49b06f5fd999e37835df232541379e35911d0af45e03e922878e07", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:23 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) [ 256.413961][T15201] SELinux: duplicate or incompatible mount options [ 256.431107][T15206] SELinux: duplicate or incompatible mount options 07:04:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:23 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:23 executing program 0: r0 = fsopen(&(0x7f00000003c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='context', &(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='context', &(0x7f0000000040)='+\x00', 0x0) 07:04:23 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x101, 0x0) getdents(r1, 0x0, 0x2000) [ 257.176906][T15240] SELinux: duplicate or incompatible mount options 07:04:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x101, 0x0) getdents(r1, 0x0, 0x2000) 07:04:24 executing program 3: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:04:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x101, 0x0) getdents(r1, 0x0, 0x2000) 07:04:24 executing program 3: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x101, 0x0) getdents(r1, 0x0, 0x2000) 07:04:24 executing program 3: perf_event_open(0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:04:24 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:24 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/block/loop0', 0x10042, 0x0) 07:04:24 executing program 3: perf_event_open(0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:04:24 executing program 4: r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a0015000200110001000d0061d1c11fe13e0e00000000", 0x39}], 0x1) 07:04:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}}, 0x0) 07:04:24 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/block/loop0', 0x10042, 0x0) 07:04:24 executing program 3: perf_event_open(0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 258.054685][T15305] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 258.062797][T15305] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.101514][T15309] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 258.109648][T15309] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}}, 0x0) 07:04:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a0015000200110001000d0061d1c11fe13e0e00000000", 0x39}], 0x1) 07:04:25 executing program 3: perf_event_open(0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4019) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f00000000c0)=0xfffffffffffffffd, 0x6) clone(0x0, &(0x7f00000005c0)="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", 0x0, &(0x7f00000001c0), &(0x7f0000000200)="398ea44a7c6c1d7ce383688ddee078f3b38708e3e26522cddb597ffaab34064e140e029a88b88e89cf71b356edc7a1ceecccd2bbddd20a99e484ec1a16c16def583c3712d787e08792785ab984c8552206743b63d06b1648159e8161f9dca1934ee43920c324d0e895dc3ee7d0ad2b5006d0bac659a1575c8d07335af1b3ead14b743060a32fba52b3d85f6b0157197da1eb0075ab87de2d961cebf46e09778ceed2bb22e188f6958f05c80c79ad00444b067a4ee76aaa6b5385e1d0b46311a6fb955eaf74127758ab736445d02e0182f14c388c6dbac16a3fcd1301ecca48f4608f9b7fe091a773dbad") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f00000016c0)=0x9, 0xff) poll(0x0, 0x0, 0x400007f) r0 = open(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='iso9660\x00', 0x0, &(0x7f0000001640)=')$.:#\t\x00') renameat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000080)='./file0\x00') clone3(&(0x7f0000000540)={0x200004080, 0x0, 0x0, 0x0, {}, &(0x7f0000001780)=""/219, 0xdb, &(0x7f0000000400)=""/207, &(0x7f0000001680)=[0x0, 0x0, 0x0], 0x3}, 0x58) set_mempolicy(0x0, &(0x7f0000000000)=0x9c, 0x4) 07:04:25 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/block/loop0', 0x10042, 0x0) 07:04:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000ea2ee4b0000003003e0000000000000000000000000944b7c62dfdb6cf000000000000000000000000000000380002"], 0x101) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:04:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}}, 0x20) 07:04:25 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/block/loop0', 0x10042, 0x0) [ 258.212588][T15329] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 258.220881][T15329] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a0015000200110001000d0061d1c11fe13e0e00000000", 0x39}], 0x1) 07:04:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}}, 0x0) 07:04:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}}, 0x20) 07:04:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000ea2ee4b0000003003e0000000000000000000000000944b7c62dfdb6cf000000000000000000000000000000380002"], 0x101) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:04:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a0015000200110001000d0061d1c11fe13e0e00000000", 0x39}], 0x1) 07:04:25 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) [ 258.373324][T15368] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 258.381442][T15368] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:25 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 07:04:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}}, 0x20) 07:04:25 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 07:04:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x22, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}}, 0x0) 07:04:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000ea2ee4b0000003003e0000000000000000000000000944b7c62dfdb6cf000000000000000000000000000000380002"], 0x101) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:04:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11e, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:25 executing program 4: unshare(0x8000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 07:04:25 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 07:04:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}}, 0x20) [ 258.538897][T15407] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 258.547127][T15407] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_io_uring_setup(0xe20, &(0x7f0000000240), &(0x7f0000041000/0x2000)=nil, &(0x7f0000043000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:04:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000ea2ee4b0000003003e0000000000000000000000000944b7c62dfdb6cf000000000000000000000000000000380002"], 0x101) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:04:25 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 07:04:25 executing program 4: unshare(0x8000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 07:04:25 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 07:04:25 executing program 4: unshare(0x8000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 07:04:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) [ 258.684228][ T22] audit: type=1326 audit(1633935865.517:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ffd978d9 code=0x0 07:04:25 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) [ 259.526705][ T22] audit: type=1326 audit(1633935866.327:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ffd978d9 code=0x0 07:04:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11e, &(0x7f0000000180)="c4ca724e3f4aa55802005338e386b3fa8b63974fa9a5f9edaae676fe976d6f5b6ff5d5345e1f233687d25e97843bcdb7bf871cf2139f5d6fa4a614fe5c4dd4eb7859c27ac05c8e5e9e6ff959661d23e7d00c846982a3c52cf22e0327bb6c892ba3c1aac86dc5ea603d0b4ab71a2f5f8294066797bddce2a8406c54163eeef70492097aa8bab56c6632b55b44e73db81e959479ef06edf16397c7e05b5c30b0b9c39d2be1ee3c4a6eda89f7389ac3c7462f34ef02ef4fd100426360bda827aef238490556d56f1823d3f9efac1399877a15797f7d6bdea6122663c61f4d91e370ed147a05446c34e3a605da879455ec83ad211a09d02c165eb15e0184f2da42ea0a45d78e96b071c3b999b2883b603c69d3fecfc06bc025f8860e356d813e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:28 executing program 4: unshare(0x8000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 07:04:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x5b, 0x31, 0x7, 0x31, 0x3b, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:28 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 07:04:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_io_uring_setup(0xe20, &(0x7f0000000240), &(0x7f0000041000/0x2000)=nil, &(0x7f0000043000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:04:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x5b, 0x31, 0x7, 0x31, 0x3b, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x5b, 0x31, 0x7, 0x31, 0x3b, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 261.583365][ T22] audit: type=1326 audit(1633935868.418:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15486 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ffd978d9 code=0x0 07:04:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x1b, 0x5b, 0x31, 0x7, 0x31, 0x3b, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:30 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) [ 263.680690][ T22] audit: type=1326 audit(1633935870.508:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15543 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ffd978d9 code=0x0 07:04:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11e, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_io_uring_setup(0xe20, &(0x7f0000000240), &(0x7f0000041000/0x2000)=nil, &(0x7f0000043000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:04:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:31 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) [ 264.877533][ T22] audit: type=1326 audit(1633935871.708:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15587 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ffd978d9 code=0x0 07:04:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_io_uring_setup(0xe20, &(0x7f0000000240), &(0x7f0000041000/0x2000)=nil, &(0x7f0000043000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:04:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11e, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:35 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 07:04:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x0, 0x7, 0x0, 0x36, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000040)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) dup3(r3, r2, 0x0) 07:04:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x0, 0x7, 0x0, 0x36, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 268.676630][ T22] audit: type=1326 audit(1633935875.508:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15612 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x0 07:04:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x0, 0x7, 0x0, 0x36, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x0, 0x7, 0x0, 0x36, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:04:35 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) 07:04:35 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) 07:04:35 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) 07:04:38 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 07:04:38 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) 07:04:38 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) [ 271.653315][ T22] audit: type=1326 audit(1633935878.488:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15672 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x0 07:04:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xffffffca) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffd, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 07:04:39 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000100)=[{r2}], 0x64, 0x603) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 07:04:39 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) 07:04:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:39 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) write$binfmt_script(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB='#!'], 0x1136) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='\x00'], 0x0) [ 272.738106][ C0] sd 0:0:1:0: tag#1802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.747956][ C0] sd 0:0:1:0: tag#1802 CDB: opcode=0xe5 (vendor) [ 272.754313][ C0] sd 0:0:1:0: tag#1802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 272.763374][ C0] sd 0:0:1:0: tag#1802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 272.772429][ C0] sd 0:0:1:0: tag#1802 CDB[20]: ba 07:04:39 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xb0000015}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 07:04:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:39 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000100)=[{r2}], 0x64, 0x603) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) [ 272.872543][ T22] audit: type=1326 audit(1633935879.708:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x0 07:04:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xffffffca) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffd, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 07:04:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) [ 272.931334][ C1] sd 0:0:1:0: tag#1803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 272.941191][ C1] sd 0:0:1:0: tag#1803 CDB: opcode=0xe5 (vendor) [ 272.947548][ C1] sd 0:0:1:0: tag#1803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 272.956589][ C1] sd 0:0:1:0: tag#1803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 272.965637][ C1] sd 0:0:1:0: tag#1803 CDB[20]: ba 07:04:39 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000100)=[{r2}], 0x64, 0x603) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 07:04:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xffffffca) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffd, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 273.035587][ C0] sd 0:0:1:0: tag#1804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 273.045451][ C0] sd 0:0:1:0: tag#1804 CDB: opcode=0xe5 (vendor) [ 273.051803][ C0] sd 0:0:1:0: tag#1804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 273.060825][ C0] sd 0:0:1:0: tag#1804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 273.069860][ C0] sd 0:0:1:0: tag#1804 CDB[20]: ba 07:04:40 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000100)=[{r2}], 0x64, 0x603) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) [ 273.135522][ C0] sd 0:0:1:0: tag#1805 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 273.145368][ C0] sd 0:0:1:0: tag#1805 CDB: opcode=0xe5 (vendor) [ 273.151720][ C0] sd 0:0:1:0: tag#1805 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 273.160849][ C0] sd 0:0:1:0: tag#1805 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 273.169880][ C0] sd 0:0:1:0: tag#1805 CDB[20]: ba 07:04:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xffffffca) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xfffd, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 07:04:40 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) [ 273.730293][ C0] sd 0:0:1:0: tag#1806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 273.740242][ C0] sd 0:0:1:0: tag#1806 CDB: opcode=0xe5 (vendor) [ 273.746711][ C0] sd 0:0:1:0: tag#1806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 273.752196][ C1] sd 0:0:1:0: tag#1807 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 273.755851][ C0] sd 0:0:1:0: tag#1806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 273.765662][ C1] sd 0:0:1:0: tag#1807 CDB: opcode=0xe5 (vendor) [ 273.774646][ C0] sd 0:0:1:0: tag#1806 CDB[20]: ba [ 273.780947][ C1] sd 0:0:1:0: tag#1807 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 273.795082][ C1] sd 0:0:1:0: tag#1807 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 273.804133][ C1] sd 0:0:1:0: tag#1807 CDB[20]: ba [ 273.815746][ C1] sd 0:0:1:0: tag#1808 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:04:40 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) [ 273.825772][ C1] sd 0:0:1:0: tag#1808 CDB: opcode=0xe5 (vendor) [ 273.832116][ C1] sd 0:0:1:0: tag#1808 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 273.841235][ C1] sd 0:0:1:0: tag#1808 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 273.850282][ C1] sd 0:0:1:0: tag#1808 CDB[20]: ba 07:04:40 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:40 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:40 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x0, 0x0) 07:04:40 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:40 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}, 0x10) 07:04:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:41 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}, 0x10) 07:04:41 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40345410, &(0x7f0000000000)={0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5420) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001400)={0x1}) 07:04:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) [ 274.285107][ C0] sd 0:0:1:0: tag#1809 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 274.294982][ C0] sd 0:0:1:0: tag#1809 CDB: opcode=0xe5 (vendor) [ 274.301423][ C0] sd 0:0:1:0: tag#1809 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 274.301842][ C1] sd 0:0:1:0: tag#1810 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 274.310458][ C0] sd 0:0:1:0: tag#1809 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 274.320253][ C1] sd 0:0:1:0: tag#1810 CDB: opcode=0xe5 (vendor) 07:04:41 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}, 0x10) [ 274.329268][ C0] sd 0:0:1:0: tag#1809 CDB[20]: ba [ 274.335763][ C1] sd 0:0:1:0: tag#1810 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 274.349908][ C1] sd 0:0:1:0: tag#1810 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 274.358983][ C1] sd 0:0:1:0: tag#1810 CDB[20]: ba 07:04:41 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}, 0x10) 07:04:41 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x1, &(0x7f0000000040)={0x0, 0x9c2}) [ 274.495033][ C0] sd 0:0:1:0: tag#1811 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 274.504910][ C0] sd 0:0:1:0: tag#1811 CDB: opcode=0xe5 (vendor) [ 274.511232][ C0] sd 0:0:1:0: tag#1811 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 274.520274][ C0] sd 0:0:1:0: tag#1811 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 274.529418][ C0] sd 0:0:1:0: tag#1811 CDB[20]: ba 07:04:41 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0, 0x0) [ 274.588992][ T22] audit: type=1326 audit(1633935881.418:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 07:04:41 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0, 0x0) 07:04:41 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r0, &(0x7f0000000000)="acf24305", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r1}, 0x80) [ 274.665261][ T22] audit: type=1326 audit(1633935881.418:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 [ 274.759662][ T22] audit: type=1326 audit(1633935881.418:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 [ 274.784666][ T22] audit: type=1326 audit(1633935881.418:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 [ 274.809906][ T22] audit: type=1326 audit(1633935881.418:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 [ 274.835200][ T22] audit: type=1326 audit(1633935881.418:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15875 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 07:04:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x300, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3, @ANYBLOB="39a4c7400f2574b2aa51a694c09e6dfbeb02a2074d4cde087d0ea3787a2c35c4537cd9a10886f2befa3b861554684221f6064d6371fca5a8c27733048327a0cbf48c3a61447b37f53b039d0aab7daf8f08b51da38bf8de9cbea547815cdce50907ad6e8234c04eb78bee33acb2f78b70bcbbb823413ea0b9a000aa02f03b12c912ab895ff666ac46f691887f503917a43a8c052fad1ad22fcf53fb2fae1438a48b96b979fcbd781818b087f3c449560ffcc0522da66511a81c92cef4118cbce5d043414bafc3cd87b01a5ee9d84281965e20c506a88c34257bca4c33c558159ca3181e", @ANYBLOB="3d25d7c5522887e07e72bc2132ad09bb2b059e192791d0450c0bc3f47320c4533a1e6b5eed34c275cad7744641e440b08569d882122d2346b65e92558fe71127d308648f578e110a344f3f691309a71927a84bd4a1ee127c614001c96b79f86939a40403675f7d1e8d4678b3ffa0fa644dba10d80dde941c6df31db3bfeeaaf1", @ANYRES32, @ANYBLOB="5339cf2186a521075f6e1a353fefd59d790530cfb4f28695fb20bbc76aaf13577e1c826b09c40e0a07d629f73a5586f267df1feaaa9652c88aa64ada01deb9d4d4b1b400a88464bbc2e1c89313b179f175fbf6a46fb4b2a18175be08f83015679c746ecf70c4623431e42ed5a55c117da3e5b1b637f4111bfc6e00ae6836f6dc308cfa2b09adac265a6e7477e748d8b392df238d727be44fa88fc1daa1639c53", @ANYRES64], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x57, 0xfff}, 0x0, 0x10000, 0x0, 0x2, 0x5, 0xb6c0, 0xee1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x1, 0x1, 0x0, 0xe00000, 0x82000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5d9, 0x4, @perf_config_ext={0x9, 0x401}, 0x98, 0x6, 0x6dc, 0x9, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r5 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000, 0x0, 0x0) tkill(r5, 0x1d) sendto$inet6(r2, &(0x7f0000000140)="2b9c52a8621801fb18cf342fc1e87aa69aed4f161030af0582ec50a28d40899e7eedc96f88a58cccf946c78e7705c378a1c21032ba821018684394e6e715bc3e078bf813ef2d0abec019322454cdb985a3f763981a0d6312", 0x58, 0x4000000, 0x0, 0x0) 07:04:41 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x1, &(0x7f0000000040)={0x0, 0x9c2}) 07:04:41 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0, 0x0) 07:04:41 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r0, &(0x7f0000000000)="acf24305", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r1}, 0x80) 07:04:41 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:41 executing program 1: r0 = semget(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000019040)=[{}], 0x1, 0x0) 07:04:41 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x1, &(0x7f0000000040)={0x0, 0x9c2}) [ 274.971776][ T22] audit: type=1326 audit(1633935881.798:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15904 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 07:04:41 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r0, &(0x7f0000000000)="acf24305", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r1}, 0x80) 07:04:41 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:41 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/187, 0xbb}], 0x1, 0x0, 0x0) [ 275.000263][ T22] audit: type=1326 audit(1633935881.798:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=15904 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7efd33a078d9 code=0x7ffc0000 07:04:41 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:41 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r0, &(0x7f0000000000)="acf24305", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r1}, 0x80) 07:04:42 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setrlimit(0x1, &(0x7f0000000040)={0x0, 0x9c2}) 07:04:42 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 07:04:42 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x188) acct(0x0) 07:04:42 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 07:04:42 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) [ 275.828476][T15974] Process accounting resumed 07:04:42 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f00000000c0)=[r1]) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 07:04:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x188) acct(0x0) [ 275.855843][T15974] Process accounting resumed 07:04:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x5, 0x100, &(0x7f0000000180)="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"}) 07:04:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) [ 275.945120][T15997] Process accounting resumed 07:04:43 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:43 executing program 3: syz_open_dev$sg(&(0x7f0000000300), 0x0, 0xac02) 07:04:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b4808", 0x5}], 0x1) 07:04:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x5, 0x100, &(0x7f0000000180)="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"}) 07:04:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x188) acct(0x0) 07:04:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 07:04:43 executing program 4: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) [ 276.731856][T16013] Process accounting resumed 07:04:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x188) acct(0x0) 07:04:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b4808", 0x5}], 0x1) 07:04:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x5, 0x100, &(0x7f0000000180)="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"}) 07:04:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b4808", 0x5}], 0x1) [ 276.833838][T16030] Process accounting resumed 07:04:44 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b4808", 0x5}], 0x1) 07:04:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x5, 0x100, &(0x7f0000000180)="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"}) 07:04:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x4b4a, &(0x7f0000000000)) 07:04:44 executing program 4: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 07:04:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000027c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:04:45 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!%/}\x00') 07:04:45 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x4b4a, &(0x7f0000000000)) 07:04:45 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 07:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x4b4a, &(0x7f0000000000)) 07:04:45 executing program 4: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = dup3(r0, r3, 0x0) write$tcp_mem(r4, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x20, 0xfffffffffffffffe, 0xa}, 0x48) 07:04:45 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!%/}\x00') 07:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x4b4a, &(0x7f0000000000)) 07:04:45 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:45 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!%/}\x00') 07:04:45 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:45 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='!%/}\x00') 07:04:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 07:04:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="abfef2f60b097100008058"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:04:46 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x1) 07:04:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="abfef2f60b097100008058"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:04:46 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x1) 07:04:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f00000090c0)) 07:04:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 07:04:46 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x1) 07:04:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="abfef2f60b097100008058"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:04:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="abfef2f60b097100008058"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 07:04:47 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x1) 07:04:47 executing program 5: r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000008880)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x6372, 0x0, 0x0, 0x0, 0x0) 07:04:47 executing program 5: r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000008880)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x6372, 0x0, 0x0, 0x0, 0x0) 07:04:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:47 executing program 5: r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000008880)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x6372, 0x0, 0x0, 0x0, 0x0) 07:04:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/15, 0xf) writev(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1) 07:04:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:48 executing program 5: r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000008880)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x6372, 0x0, 0x0, 0x0, 0x0) 07:04:48 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fscontext=\"ysa']) 07:04:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 281.242266][T16267] SELinux: security_context_str_to_sid(ysa) failed for (dev tmpfs, type tmpfs) errno=-22 [ 281.265774][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 281.265801][ C0] sd 0:0:1:0: tag#1805 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.282230][ C0] sd 0:0:1:0: tag#1805 CDB: opcode=0xe5 (vendor) [ 281.288564][ C0] sd 0:0:1:0: tag#1805 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.297600][ C0] sd 0:0:1:0: tag#1805 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.306627][ C0] sd 0:0:1:0: tag#1805 CDB[20]: ba [ 281.318377][T16269] device lo entered promiscuous mode [ 281.324743][T16269] Y­4`Ò˜: renamed from lo 07:04:48 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fscontext=\"ysa']) 07:04:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 281.335681][ C0] sd 0:0:1:0: tag#1820 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.345613][ C0] sd 0:0:1:0: tag#1820 CDB: opcode=0xe5 (vendor) [ 281.351963][ C0] sd 0:0:1:0: tag#1820 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 281.360963][ C0] sd 0:0:1:0: tag#1820 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.370029][ C0] sd 0:0:1:0: tag#1820 CDB[20]: ba 07:04:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 281.476457][T16290] SELinux: security_context_str_to_sid(ysa) failed for (dev tmpfs, type tmpfs) errno=-22 [ 281.493974][ C1] sd 0:0:1:0: tag#1832 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 281.503867][ C1] sd 0:0:1:0: tag#1832 CDB: opcode=0xe5 (vendor) [ 281.510209][ C1] sd 0:0:1:0: tag#1832 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 07:04:48 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fscontext=\"ysa']) [ 281.519268][ C1] sd 0:0:1:0: tag#1832 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 281.528332][ C1] sd 0:0:1:0: tag#1832 CDB[20]: ba 07:04:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 281.607488][T16309] SELinux: security_context_str_to_sid(ysa) failed for (dev tmpfs, type tmpfs) errno=-22 07:04:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:48 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fscontext=\"ysa']) [ 282.174211][ C0] sd 0:0:1:0: tag#1821 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 282.184302][ C0] sd 0:0:1:0: tag#1821 CDB: opcode=0xe5 (vendor) [ 282.190643][ C0] sd 0:0:1:0: tag#1821 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 282.199695][ C0] sd 0:0:1:0: tag#1821 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 282.208813][ C0] sd 0:0:1:0: tag#1821 CDB[20]: ba 07:04:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 282.221341][T16326] SELinux: security_context_str_to_sid(ysa) failed for (dev tmpfs, type tmpfs) errno=-22 07:04:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x0, 0x5, 0x0, 0x0, 0x5, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0xcd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x0) unlink(0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 07:04:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 282.463773][ C0] sd 0:0:1:0: tag#1854 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 282.473648][ C0] sd 0:0:1:0: tag#1854 CDB: opcode=0xe5 (vendor) [ 282.479981][ C0] sd 0:0:1:0: tag#1854 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 282.489048][ C0] sd 0:0:1:0: tag#1854 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 282.498125][ C0] sd 0:0:1:0: tag#1854 CDB[20]: ba 07:04:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 283.353597][ C1] sd 0:0:1:0: tag#1813 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.363450][ C1] sd 0:0:1:0: tag#1813 CDB: opcode=0xe5 (vendor) [ 283.369783][ C1] sd 0:0:1:0: tag#1813 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 283.378832][ C1] sd 0:0:1:0: tag#1813 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 283.387880][ C1] sd 0:0:1:0: tag#1813 CDB[20]: ba [ 283.394415][T16402] device lo entered promiscuous mode 07:04:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 283.406765][ C0] sd 0:0:1:0: tag#1814 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.416737][ C0] sd 0:0:1:0: tag#1814 CDB: opcode=0xe5 (vendor) [ 283.423168][ C0] sd 0:0:1:0: tag#1814 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 283.432211][ C0] sd 0:0:1:0: tag#1814 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 283.441248][ C0] sd 0:0:1:0: tag#1814 CDB[20]: ba 07:04:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 283.458618][T16409] device lo entered promiscuous mode 07:04:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 07:04:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 283.481623][T16413] Y­4`Ò˜: renamed from lo [ 283.489829][T16409] Y­4`Ò˜: renamed from lo 07:04:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 283.554227][T16430] device lo entered promiscuous mode [ 283.564057][ C0] sd 0:0:1:0: tag#1815 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.573903][ C0] sd 0:0:1:0: tag#1815 CDB: opcode=0xe5 (vendor) [ 283.580342][ C0] sd 0:0:1:0: tag#1815 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 283.583548][T16430] Y­4`Ò˜: renamed from lo [ 283.589378][ C0] sd 0:0:1:0: tag#1815 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:04:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 2: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) [ 283.603055][ C0] sd 0:0:1:0: tag#1815 CDB[20]: ba [ 283.608205][ C0] sd 0:0:1:0: tag#1816 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.618040][ C0] sd 0:0:1:0: tag#1816 CDB: opcode=0xe5 (vendor) [ 283.624391][ C0] sd 0:0:1:0: tag#1816 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 283.633428][ C0] sd 0:0:1:0: tag#1816 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 283.642468][ C0] sd 0:0:1:0: tag#1816 CDB[20]: ba 07:04:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 283.664404][ C1] sd 0:0:1:0: tag#1817 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.674282][ C1] sd 0:0:1:0: tag#1817 CDB: opcode=0xe5 (vendor) [ 283.680628][ C1] sd 0:0:1:0: tag#1817 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 283.680650][ C1] sd 0:0:1:0: tag#1817 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:04:50 executing program 2: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) [ 283.680688][ C1] sd 0:0:1:0: tag#1817 CDB[20]: ba 07:04:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) [ 283.750246][T16447] device lo entered promiscuous mode [ 283.768209][T16447] Y­4`Ò˜: renamed from lo 07:04:50 executing program 2: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) 07:04:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 2: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) 07:04:50 executing program 0: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) 07:04:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee00, 0xee00) ioctl$KDSKBLED(r0, 0x4b3d, 0x0) 07:04:50 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="dca5f96594477abb6550af"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82380) close(r0) 07:04:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee00, 0xee00) ioctl$KDSKBLED(r0, 0x4b3d, 0x0) 07:04:50 executing program 0: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) 07:04:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x80, 0xffa9, 0x81, 0x4}}) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001440), 0x0, 0x200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x44061) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0xfee, 0x0, [0x6, 0x0, 0x100000000, 0x7, 0x7f], [0x4, 0x6, 0x9, 0x480d, 0x9, 0xfffffffffffffff7, 0x9, 0x100000001, 0x20, 0x5, 0x8a, 0x4, 0x6, 0x4, 0x200, 0x3, 0xb3e, 0x7fffffff, 0x9, 0x95, 0x4, 0xfffffffffffffffe, 0xcff, 0x2, 0x9, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xe9c, 0x800, 0x4, 0x6, 0x106b, 0xffffffff, 0x3, 0x3f, 0xff, 0x800, 0x6, 0x6, 0x9, 0x0, 0x9, 0x3, 0x7ff, 0xffffffffffff9b4d, 0x3f, 0x10000, 0x1, 0xffffffff, 0x7, 0x3, 0x7f, 0x6, 0xffffffffffffc71a, 0x6, 0x1, 0x4, 0x1, 0x2, 0x1000, 0x80000001, 0x7, 0x800, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x9, 0x22, 0x3, 0x2, 0xa9c3000000000000, 0x3, 0x9, 0xa6, 0x0, 0x5, 0xab0, 0x200, 0x7fffffff, 0x8, 0x101, 0x6, 0x180, 0x1000, 0x81, 0x6, 0x8, 0x7, 0x3, 0x0, 0x2, 0x6, 0x8, 0x7f, 0x4, 0x1, 0xffffffff, 0x80, 0x2, 0x8, 0x7, 0x5, 0x100000000, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x1b2, 0x2, 0x1c0000000000000, 0x7, 0x0, 0x8, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001340)={r3, 0x2, 0x1f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r3, 0x800, 0x7}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000380)=[{{&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 07:04:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82380) close(r0) 07:04:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee00, 0xee00) ioctl$KDSKBLED(r0, 0x4b3d, 0x0) 07:04:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82380) close(r0) 07:04:51 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 07:04:51 executing program 0: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='h', 0x1, r0) 07:04:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82380) close(r0) 07:04:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee00, 0xee00) ioctl$KDSKBLED(r0, 0x4b3d, 0x0) 07:04:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="dca5f96594477abb6550af"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:53 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:53 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:04:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x1, "66fc418bc0"}, &(0x7f0000000040)=0x29) 07:04:53 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 07:04:53 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) [ 287.137087][T16615] Process accounting resumed 07:04:54 executing program 1: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:54 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 07:04:54 executing program 1: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 287.261235][ T22] kauditd_printk_skb: 11 callbacks suppressed [ 287.261245][ T22] audit: type=1326 audit(1633935894.099:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.341960][ T22] audit: type=1326 audit(1633935894.099:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:04:54 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 07:04:54 executing program 2: syz_open_dev$evdev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xee74d679fd12cda3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) [ 287.378277][ T22] audit: type=1326 audit(1633935894.099:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:04:54 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) [ 287.523315][ T22] audit: type=1326 audit(1633935894.099:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.592337][T16618] Process accounting resumed [ 287.638007][ T22] audit: type=1326 audit(1633935894.099:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.675261][ T22] audit: type=1326 audit(1633935894.099:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.700243][ T22] audit: type=1326 audit(1633935894.099:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.725369][ T22] audit: type=1326 audit(1633935894.099:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.750649][ T22] audit: type=1326 audit(1633935894.099:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 287.775959][ T22] audit: type=1326 audit(1633935894.099:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16619 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:04:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="dca5f96594477abb6550af"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:56 executing program 1: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:56 executing program 5: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:56 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:04:56 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:04:56 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:57 executing program 1: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:57 executing program 5: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:57 executing program 5: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:04:57 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) [ 290.192152][T16669] Process accounting resumed [ 290.197142][T16670] Process accounting resumed 07:04:57 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:57 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="dca5f96594477abb6550af"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:04:59 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:04:59 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:59 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:04:59 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:04:59 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:05:00 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:05:00 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) [ 293.212813][T16717] Process accounting resumed [ 293.229719][T16715] Process accounting resumed 07:05:00 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:05:00 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:05:00 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) [ 293.547958][T16737] Process accounting resumed 07:05:00 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) [ 293.683188][T16748] Process accounting resumed 07:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f00000001c0)="200000000002000019000000600100000f0000000000ee00000084b071e12014f06c07e60000040000000000ddf4655fddf44b5f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 07:05:02 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:05:02 executing program 2: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 07:05:02 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r1, 0x7fa) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14}, 0x14) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000006c0)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 07:05:02 executing program 1: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0x18) 07:05:02 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 07:05:03 executing program 2: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 296.153041][ T22] kauditd_printk_skb: 64 callbacks suppressed [ 296.153052][ T22] audit: type=1326 audit(1633935902.980:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 07:05:03 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:03 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 07:05:03 executing program 2: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x0, 0xfffffffffffffe00}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 296.185528][ T22] audit: type=1326 audit(1633935902.980:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 07:05:03 executing program 1: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0x18) 07:05:03 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 296.237060][ T22] audit: type=1326 audit(1633935902.980:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.280837][T16787] Process accounting resumed 07:05:03 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 296.339524][ T22] audit: type=1326 audit(1633935902.980:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.395951][ T22] audit: type=1326 audit(1633935902.980:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.421025][ T22] audit: type=1326 audit(1633935902.980:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.446997][ T22] audit: type=1326 audit(1633935902.980:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.472485][ T22] audit: type=1326 audit(1633935902.980:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.498101][ T22] audit: type=1326 audit(1633935902.980:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 [ 296.523475][ T22] audit: type=1326 audit(1633935903.050:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16772 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190d04c8d9 code=0x7ffc0000 07:05:03 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:05:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x0, 0x3f, 0x80, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb127, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xffff, 0x5, 0x6, 0x1, 0x0, 0xe32, 0x0, 0x139f, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x2007) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 07:05:03 executing program 1: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0x18) 07:05:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x130, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 07:05:03 executing program 4: r0 = epoll_create(0x405ffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000004}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:05:03 executing program 1: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/223, 0x18) [ 296.613125][T16813] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 07:05:03 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x0, 0x3f, 0x80, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb127, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xffff, 0x5, 0x6, 0x1, 0x0, 0xe32, 0x0, 0x139f, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x2007) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 07:05:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x10d882) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 07:05:03 executing program 4: r0 = epoll_create(0x405ffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000004}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 296.707029][T16836] Process accounting resumed 07:05:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x10d882) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 07:05:03 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:03 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) acct(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d900f) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 07:05:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x0, 0x3f, 0x80, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb127, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xffff, 0x5, 0x6, 0x1, 0x0, 0xe32, 0x0, 0x139f, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x2007) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 07:05:03 executing program 4: r0 = epoll_create(0x405ffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000004}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:05:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x10d882) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 07:05:03 executing program 4: r0 = epoll_create(0x405ffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000004}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 07:05:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x0, 0x3f, 0x80, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb127, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xffff, 0x5, 0x6, 0x1, 0x0, 0xe32, 0x0, 0x139f, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x2007) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 297.099704][T16899] Process accounting resumed 07:05:04 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x10d882) r1 = memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 07:05:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 07:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x100000000000001, 0x20011, r1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) 07:05:04 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 07:05:04 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2081090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20944a6, &(0x7f0000000200)={[{@debug_want_extra_isize}]}) 07:05:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x100000000000001, 0x20011, r1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) 07:05:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 07:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x100000000000001, 0x20011, r1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) 07:05:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 297.466133][T16924] EXT4-fs (sda1): Invalid want_extra_isize 0 [ 297.499275][T16938] IPv6: sit1: Disabled Multicast RS [ 297.504571][T16942] EXT4-fs (sda1): Invalid want_extra_isize 0 07:05:04 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:04 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000c540)=[{{&(0x7f0000000140)=@abs={0xa}, 0x6e, 0x0}}], 0x1, 0x0) 07:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x100000000000001, 0x20011, r1, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000001740), 0x0, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) 07:05:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000080)='./bus\x00') 07:05:04 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2081090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20944a6, &(0x7f0000000200)={[{@debug_want_extra_isize}]}) 07:05:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000c540)=[{{&(0x7f0000000140)=@abs={0xa}, 0x6e, 0x0}}], 0x1, 0x0) 07:05:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2081090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20944a6, &(0x7f0000000200)={[{@debug_want_extra_isize}]}) 07:05:04 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000c540)=[{{&(0x7f0000000140)=@abs={0xa}, 0x6e, 0x0}}], 0x1, 0x0) [ 297.815294][T16970] EXT4-fs (sda1): Invalid want_extra_isize 0 [ 297.835759][T16979] IPv6: sit1: Disabled Multicast RS [ 297.904533][T16992] EXT4-fs (sda1): Invalid want_extra_isize 0 07:05:04 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000c540)=[{{&(0x7f0000000140)=@abs={0xa}, 0x6e, 0x0}}], 0x1, 0x0) 07:05:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:04 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2081090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20944a6, &(0x7f0000000200)={[{@debug_want_extra_isize}]}) 07:05:04 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000180), 0xfea) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0) 07:05:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa2c59d268ef3886cb4c749a9dc71c9cf8818cd77a72aae000200"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x401, 0x1, 0x3, 0x2}, 0xffe2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 07:05:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) [ 298.131314][T17005] EXT4-fs (sda1): Invalid want_extra_isize 0 07:05:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000740)=0x1) 07:05:05 executing program 5: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket(0x11, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000400)=0x9, 0x3) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 07:05:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:05:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x562f, 0x0, 0x0, 0x438, 0x0, "95e9f4c03d052cd3612b05dfa0c0e3ec10debb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xe1) 07:05:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000740)=0x1) 07:05:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 298.230393][T17023] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 298.258235][T17023] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:05:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x562f, 0x0, 0x0, 0x438, 0x0, "95e9f4c03d052cd3612b05dfa0c0e3ec10debb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xe1) 07:05:05 executing program 5: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket(0x11, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000400)=0x9, 0x3) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 07:05:05 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000180), 0xfea) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0) 07:05:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000740)=0x1) 07:05:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x562f, 0x0, 0x0, 0x438, 0x0, "95e9f4c03d052cd3612b05dfa0c0e3ec10debb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xe1) 07:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:05:05 executing program 5: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket(0x11, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000400)=0x9, 0x3) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 07:05:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000740)=0x1) 07:05:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x562f, 0x0, 0x0, 0x438, 0x0, "95e9f4c03d052cd3612b05dfa0c0e3ec10debb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xe1) 07:05:05 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000180), 0xfea) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0) [ 298.557823][T17023] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:05:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:05 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f0000001680)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x2f) [ 298.631819][T17082] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 07:05:05 executing program 5: io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket(0x11, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000400)=0x9, 0x3) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) [ 298.672533][T17089] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 298.682602][T17082] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 298.691523][T17092] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 298.705570][T17089] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 298.719916][T17092] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:05:05 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f0000001680)="8d31e183156939000000e28c0b1dd2a357b2e1ff745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab9a915308c4829b4b43353c485f8bb2965cc5e1292aaa6375f12e594ac96800000000823ec2117496b2dd4837334f73c37edfd46003eb96a9c79d3de0cab4645adde76e8ac90dba5bdc53cdc3235210b2e21df4f23e22471e2d53415f8f4151d0b915d0c68708733778513261f1e9a548b33b5e8a96381e1d1ff7adcc95ed1cdd1e42fa8f94fc07e0ba6d35a1c89c4b200f63c0b8a455a19c00994f30c13cd0c08ac368d2d3e0423f0959abbe34ea129b4beb505903dfd43cf81e8f42776760740ecfdc950050f37a9601077704515f7e1624bc5f61e5f3b56c339e4c70127b60cbe5de1fab4991eaa58b248cd5f3995b3df202c239376caaff313b2af3b6e996bc2c24daa34f7dcd142354e713a6f96f79a8"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x2f) 07:05:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:05 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000180), 0xfea) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0) 07:05:05 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f0000001680)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x2f) 07:05:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) [ 299.197808][T17128] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:05:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:06 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f0000001680)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x2f) 07:05:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:06 executing program 1: r0 = getpgid(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioprio_set$pid(0x1, r0, 0x0) 07:05:06 executing program 5: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:06 executing program 5: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:06 executing program 1: r0 = getpgid(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioprio_set$pid(0x1, r0, 0x0) 07:05:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) write(r1, 0x0, 0x0) 07:05:06 executing program 1: r0 = getpgid(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioprio_set$pid(0x1, r0, 0x0) 07:05:06 executing program 5: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:06 executing program 1: r0 = getpgid(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioprio_set$pid(0x1, r0, 0x0) 07:05:06 executing program 5: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x9, 0x0) 07:05:06 executing program 1: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x34}}, 0x0) 07:05:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1265, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 07:05:07 executing program 1: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x34}}, 0x0) 07:05:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x0) 07:05:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rpc\x00') fstat(r0, &(0x7f0000000140)) 07:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c47d9c3623c26f45958dc387cf4c", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:05:07 executing program 1: sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 07:05:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x34}}, 0x0) 07:05:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1265, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 07:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c47d9c3623c26f45958dc387cf4c", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:05:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rpc\x00') fstat(r0, &(0x7f0000000140)) 07:05:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1265, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 07:05:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1265, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 07:05:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 07:05:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x34}}, 0x0) 07:05:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x0) 07:05:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rpc\x00') fstat(r0, &(0x7f0000000140)) 07:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c47d9c3623c26f45958dc387cf4c", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:05:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd0738, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r2, 0x1, 0x20, &(0x7f00000001c0)={0x77359400}, 0x10) 07:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x80}, {0x7c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:05:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 07:05:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 07:05:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rpc\x00') fstat(r0, &(0x7f0000000140)) 07:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c47d9c3623c26f45958dc387cf4c", 0x32}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 07:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x80}, {0x7c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:05:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 07:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x80}, {0x7c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:05:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x0) 07:05:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x901, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x21}}]}, 0x1c}}, 0x0) 07:05:07 executing program 4: set_mempolicy(0x1, &(0x7f00000002c0)=0x80000001, 0x3b65) r0 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 07:05:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd0738, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r2, 0x1, 0x20, &(0x7f00000001c0)={0x77359400}, 0x10) 07:05:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x80}, {0x7c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:05:07 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x67, &(0x7f0000000540)="8de2fef1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236f88b630a670057a74244a9616c389ba2273b94ba06b9e4e380b6bfb960571d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d543"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x901, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x21}}]}, 0x1c}}, 0x0) 07:05:07 executing program 4: set_mempolicy(0x1, &(0x7f00000002c0)=0x80000001, 0x3b65) r0 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 07:05:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x0) 07:05:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x901, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x21}}]}, 0x1c}}, 0x0) 07:05:07 executing program 4: set_mempolicy(0x1, &(0x7f00000002c0)=0x80000001, 0x3b65) r0 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 07:05:07 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffff}], 0x0) 07:05:07 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x67, &(0x7f0000000540)="8de2fef1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236f88b630a670057a74244a9616c389ba2273b94ba06b9e4e380b6bfb960571d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d543"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:07 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x67, &(0x7f0000000540)="8de2fef1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236f88b630a670057a74244a9616c389ba2273b94ba06b9e4e380b6bfb960571d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d543"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x901, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x21}}]}, 0x1c}}, 0x0) 07:05:08 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd0738, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r2, 0x1, 0x20, &(0x7f00000001c0)={0x77359400}, 0x10) 07:05:08 executing program 4: set_mempolicy(0x1, &(0x7f00000002c0)=0x80000001, 0x3b65) r0 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 07:05:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffff}], 0x0) 07:05:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$tmpfs(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) 07:05:08 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x67, &(0x7f0000000540)="8de2fef1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236f88b630a670057a74244a9616c389ba2273b94ba06b9e4e380b6bfb960571d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d543"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffff}], 0x0) 07:05:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xa4}, {0x6c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 07:05:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x4, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffff}], 0x0) [ 301.366465][ T22] kauditd_printk_skb: 22 callbacks suppressed [ 301.366476][ T22] audit: type=1326 audit(1633935908.190:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17394 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x0 07:05:08 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd0738, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r2, 0x1, 0x20, &(0x7f00000001c0)={0x77359400}, 0x10) 07:05:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x38, 0x0, &(0x7f0000ffd000/0x3000)=nil) 07:05:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/171, 0xab}], 0x1, 0x1, 0x0) 07:05:08 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:08 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffc}, 0x1) io_uring_enter(r0, 0x1514, 0x0, 0x0, 0x0, 0x0) 07:05:09 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xa4}, {0x6c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 07:05:09 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:09 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffc}, 0x1) io_uring_enter(r0, 0x1514, 0x0, 0x0, 0x0, 0x0) 07:05:09 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:09 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x38, 0x0, &(0x7f0000ffd000/0x3000)=nil) [ 302.197508][ T22] audit: type=1326 audit(1633935909.020:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17394 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x0 07:05:09 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:09 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:09 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) [ 302.283470][ T22] audit: type=1326 audit(1633935909.110:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17454 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x0 07:05:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x38, 0x0, &(0x7f0000ffd000/0x3000)=nil) 07:05:09 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffc}, 0x1) io_uring_enter(r0, 0x1514, 0x0, 0x0, 0x0, 0x0) 07:05:09 executing program 1: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:09 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xa4}, {0x6c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 07:05:09 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x38, 0x0, &(0x7f0000ffd000/0x3000)=nil) 07:05:09 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffc}, 0x1) io_uring_enter(r0, 0x1514, 0x0, 0x0, 0x0, 0x0) 07:05:09 executing program 1: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:10 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:10 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) [ 303.147605][ T22] audit: type=1326 audit(1633935909.970:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17493 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x0 07:05:10 executing program 1: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x8) 07:05:10 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:10 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) 07:05:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xa4}, {0x6c}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 07:05:10 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000600)='/#&[:y\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='}-\x00', &(0x7f0000000500)='+&,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='}-$%.\x9a\x00', &(0x7f0000000280)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x8c\x00', &(0x7f0000000300)='`$}^@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='--@\x00', &(0x7f0000000800)='&\a\x00] \x90\xdc\xed0\xe9\x83\xe8\xcb\x1el\xd5\xdb\xb2~\x8e\x00\x00\x00\x00\x00\x00<\xef52Xq\x04t\xa7c\x95\xda\xcbG\xcb\x01s\xa2&\xc9G\xa3\xa6L\xf4\xe8d\xc4\xe8\xe7q\x13qDm`MPo\x1d\xebX\xed\x1e\x98A\x15xf2\x1d\xd9\x05\x1a{\xc0\xed\xf9_\x03\x7fD\n\xfe$\x00!\xb8\xf9\xe7\x1d\x0fF\xfc\x15\xc3\xaf\\p\'\x19\x99\a\b\xb9\xea)\xc8\x84\n\xa9}\xb0\xe9,\xc2@\xb0\xfa#k\xc6&\xe9JQ9m\xcb\xa2]\x16\xe9\x00\t\xb0\x88\xd8cx\x83\xde\xde\xe1h\x9c\xc3A\xa7\xf2\xc5Q\xaey\xa5$\xe8\x9e\xb5$\xaf\x06\xe0\x13.\xf9eq\x81\xe2\xbf\xe4\xa6\x0f=\xb2V\xc2]\x9ae\x9e\xb1D\x0eF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0@\xf4\x85\x8eV|\x8a\xc6Y\x84\x86\x9dn\x95/\xea\xa0C]jcO\xa1\x97Z\x11\x004x+@\fd\x82U#\x99Q.`jV&\xd5\xf3\xafj\x1d\xdc\xbd8\xea\xe7.\x01\x12\x03\x1d=\xbe\xb2-\xc9c\x1b\xb5\x9f\xff\"\xf18\xd6\xcc\xfd\x8f\x93}\xed\xaa\x9f\xd0-0\b;\bU\x9ae\xfc\x15\xe4|\x12#\xbf\x85\xe4\xf8\n!9\x9c\a\xbeb\x8c#o\x8brU)\x7fc\x0f\xefA\xdb\x87\xda\xb9\xca\xd0-;\xc4\xff\x7f\x00\x00\x00\x00\x00\x00vD\xffL\xd6\xd4l~\xde\x80\x14cP\xb0\xf8a\xdc\x19\x8d]\xe8\xdb\xaf\xc2>\xb3k?\xc5\xdb\xc9I\r\xaf?\x1e}\xa3\xf3\xee\x82Bd\x8d\xea\xee\x1d<2\xe2\x872\xda\xc3\xde3\xb2\x10\xd4\x90w`\xfb\xe3@\x8andh\xb80(Q\f\r\x9e}\x93je\x81\x86G\x9b\xdd1\x9f\xf4\x171\x80*\xf6\x13s\xe1\b\"W\x0eIE\x9a_\xe3\x8a`5\xa7d\xb9\x81\t\xad_\x14\x84\xcd\xfc{\x9bPC\x18\xb3\n\x8d-\xdb$\x81\f\v\x8e\x8c\xc1i\x8c\x0f`V\xe88\x0e\xd4\x88\xc0\xd0\'+\x00\xbd)\'\\\x87\xb5V\xbc\x9b,\x1b\xd4T\x15\xb7\xbb\xf3\x89\xcf_\xce\x1a\xe5\xc9\xc0\xfe>u-Btr\xb2L\xf1\xc3)\xa9^\x1f\xb34\xe1\xcex\x85\r\x9abP\xcc={\xd0\x83\x99\'', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=':@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='+&,\x00', &(0x7f0000000440), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 07:05:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x8) 07:05:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) 07:05:10 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00003d8000/0x3000)=nil) r1 = shmat(r0, &(0x7f00003d9000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f00003d8000/0x1000)=nil, 0x5000) shmdt(r1) 07:05:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) [ 304.018013][ T22] audit: type=1326 audit(1633935910.840:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17540 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd33a078d9 code=0x0 07:05:10 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}]}, 0x7c}}, 0x0) 07:05:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}]}, 0x7c}}, 0x0) 07:05:11 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x8) 07:05:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) 07:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}]}, 0x7c}}, 0x0) 07:05:11 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x8) 07:05:11 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:11 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8}]}]}, 0x7c}}, 0x0) 07:05:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup2(r1, r0) 07:05:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup2(r1, r0) 07:05:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) 07:05:12 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x2, 0x2, 0x80000000, 0xffffffffffffffff}) 07:05:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:12 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f00000002c0)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./bus\x00') 07:05:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') fstat(r0, &(0x7f0000000100)) 07:05:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup2(r1, r0) 07:05:12 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x2, 0x2, 0x80000000, 0xffffffffffffffff}) 07:05:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:12 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x2, 0x2, 0x80000000, 0xffffffffffffffff}) 07:05:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') fstat(r0, &(0x7f0000000100)) 07:05:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup2(r1, r0) 07:05:12 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x2, 0x2, 0x80000000, 0xffffffffffffffff}) 07:05:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') fstat(r0, &(0x7f0000000100)) 07:05:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:12 executing program 5: perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2467d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 07:05:12 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00000000006bf971fb3d4b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x38) 07:05:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') fstat(r0, &(0x7f0000000100)) 07:05:12 executing program 3: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:12 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:12 executing program 3: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) [ 306.098638][ T22] audit: type=1326 audit(1633935912.920:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 3: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) [ 306.182206][ T22] audit: type=1326 audit(1633935912.920:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:13 executing program 5: perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2467d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 306.310023][ T22] audit: type=1326 audit(1633935912.920:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.399981][ T22] audit: type=1326 audit(1633935912.920:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.425169][ T22] audit: type=1326 audit(1633935912.920:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.450801][ T22] audit: type=1326 audit(1633935912.930:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.475603][ T22] audit: type=1326 audit(1633935912.930:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.501003][ T22] audit: type=1326 audit(1633935912.930:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17692 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 [ 306.526205][ T22] audit: type=1326 audit(1633935912.930:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 3: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:13 executing program 5: perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2467d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 306.563033][ T22] audit: type=1326 audit(1633935912.930:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) [ 306.600215][ T22] audit: type=1326 audit(1633935912.930:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:13 executing program 5: perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2467d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 306.694932][ T22] audit: type=1326 audit(1633935912.930:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) [ 306.812843][ T22] audit: type=1326 audit(1633935912.930:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d1cae8d9 code=0x7ffc0000 07:05:13 executing program 2: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 1: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 5: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 07:05:13 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x0, [], 0x0, "a3ee270ff0fa92"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b52, &(0x7f00000005c0)="c00c03da0c20") 07:05:13 executing program 5: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:13 executing program 0: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 2: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 1: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x7, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x40}}, 0x0) 07:05:14 executing program 5: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 2: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:14 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x0, [], 0x0, "a3ee270ff0fa92"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b52, &(0x7f00000005c0)="c00c03da0c20") 07:05:14 executing program 1: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{r0, r1/1000+10000}}, 0x0) getitimer(0x2, &(0x7f0000000100)) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000180)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000240)) timerfd_create(0x8, 0x800) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/84, 0x54, 0x1, &(0x7f0000000400)={r4, r5+10000000}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24040014) shmctl$IPC_RMID(0x0, 0x0) 07:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x7, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x40}}, 0x0) 07:05:14 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000140)={[{@rodir}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}, 0x22}]}) 07:05:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2c01) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="41bbf65354a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 07:05:14 executing program 1: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 07:05:14 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x0, [], 0x0, "a3ee270ff0fa92"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b52, &(0x7f00000005c0)="c00c03da0c20") 07:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x7, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x40}}, 0x0) 07:05:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 07:05:14 executing program 1: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 07:05:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2c01) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="41bbf65354a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 07:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x7, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x40}}, 0x0) 07:05:14 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:14 executing program 1: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 07:05:14 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x0, [], 0x0, "a3ee270ff0fa92"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b52, &(0x7f00000005c0)="c00c03da0c20") 07:05:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 07:05:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2c01) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="41bbf65354a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 07:05:15 executing program 1: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 07:05:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 07:05:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2c01) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="41bbf65354a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 07:05:15 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:15 executing program 3: timer_create(0x2, 0x0, &(0x7f0000002300)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 07:05:15 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 07:05:15 executing program 3: timer_create(0x2, 0x0, &(0x7f0000002300)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 07:05:15 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='5', 0x1}, {&(0x7f0000000180)='-', 0x1}], 0x2) 07:05:15 executing program 3: timer_create(0x2, 0x0, &(0x7f0000002300)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 07:05:15 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='5', 0x1}, {&(0x7f0000000180)='-', 0x1}], 0x2) 07:05:15 executing program 3: timer_create(0x2, 0x0, &(0x7f0000002300)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 07:05:15 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='5', 0x1}, {&(0x7f0000000180)='-', 0x1}], 0x2) 07:05:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:16 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:16 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='5', 0x1}, {&(0x7f0000000180)='-', 0x1}], 0x2) 07:05:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 07:05:16 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:16 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x140c41, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 07:05:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @mcast2}, 0x18) 07:05:16 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000140)="a539184e99ea2f9974319c25889112a5e198bbb9c9768566aa27c40b9b88b6290aa6e4b5670ac70d9724606f40a84551510cee31066286a224b6603cf88368b6a9fd4c3ca7b5"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x30}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:16 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @mcast2}, 0x18) 07:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:17 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000140)="a539184e99ea2f9974319c25889112a5e198bbb9c9768566aa27c40b9b88b6290aa6e4b5670ac70d9724606f40a84551510cee31066286a224b6603cf88368b6a9fd4c3ca7b5"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x30}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @mcast2}, 0x18) 07:05:17 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) 07:05:17 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000140)="a539184e99ea2f9974319c25889112a5e198bbb9c9768566aa27c40b9b88b6290aa6e4b5670ac70d9724606f40a84551510cee31066286a224b6603cf88368b6a9fd4c3ca7b5"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x30}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x0, @mcast2}, 0x18) 07:05:17 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) [ 310.822503][T18006] validate_nla: 11 callbacks suppressed [ 310.822516][T18006] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 310.836293][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) 07:05:17 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000240)=""/238, 0x1001) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x11000) msgget$private(0x0, 0x0) 07:05:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) 07:05:17 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000140)="a539184e99ea2f9974319c25889112a5e198bbb9c9768566aa27c40b9b88b6290aa6e4b5670ac70d9724606f40a84551510cee31066286a224b6603cf88368b6a9fd4c3ca7b5"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040), 0x30}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 07:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) 07:05:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) [ 310.952632][T18034] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 310.960937][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) 07:05:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) [ 311.083240][T18049] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 311.091448][T18049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.101089][T18058] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 311.109266][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.112990][T18055] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 311.126735][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:05:18 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:18 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x80}}) 07:05:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:18 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000002000/0x3000)=nil) 07:05:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) [ 311.606291][T18084] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 311.606639][T18083] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 311.614531][T18084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.622666][T18083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.641946][T18086] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 07:05:18 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000002000/0x3000)=nil) 07:05:18 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x80}}) [ 311.650178][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:18 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x80}}) 07:05:18 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000002000/0x3000)=nil) 07:05:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:18 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x80}}) [ 311.777655][T18106] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 311.785885][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:19 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:19 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000002000/0x3000)=nil) 07:05:19 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:19 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000120007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 07:05:19 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) [ 312.220437][T18129] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 312.228658][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 07:05:19 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:19 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:20 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:20 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:20 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:21 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:21 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:21 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:22 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:22 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:22 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:23 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:23 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:23 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:24 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:24 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:24 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18) 07:05:24 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18) 07:05:24 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18) 07:05:24 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18) 07:05:25 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000450000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) shutdown(r3, 0x1) 07:05:25 executing program 3: unshare(0x40480) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pidfd_send_signal(r0, 0xf8ffffff, &(0x7f0000000000), 0x0) 07:05:25 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:25 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:25 executing program 3: unshare(0x40480) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pidfd_send_signal(r0, 0xf8ffffff, &(0x7f0000000000), 0x0) 07:05:25 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:25 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:25 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:25 executing program 3: unshare(0x40480) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pidfd_send_signal(r0, 0xf8ffffff, &(0x7f0000000000), 0x0) 07:05:25 executing program 3: unshare(0x40480) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pidfd_send_signal(r0, 0xf8ffffff, &(0x7f0000000000), 0x0) 07:05:26 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:26 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000450000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) shutdown(r3, 0x1) 07:05:26 executing program 1: clock_gettime(0x0, &(0x7f0000003980)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ppoll(&(0x7f0000003a00)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:26 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:26 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:26 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) readlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)=""/67, 0x43) 07:05:26 executing program 1: clock_gettime(0x0, &(0x7f0000003980)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ppoll(&(0x7f0000003a00)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:27 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:27 executing program 5: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009ff000/0x4000)=nil) munlock(&(0x7f0000542000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000097f000/0x1000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8610, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001e9000/0x400000)=nil, 0x400000, 0x17) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00007c9000/0x2000)=nil, 0x2000, 0x11) mremap(&(0x7f0000419000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000092d000/0x4000)=nil) 07:05:27 executing program 3: syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000f0f000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_TEE, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1a9902, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 07:05:27 executing program 1: clock_gettime(0x0, &(0x7f0000003980)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ppoll(&(0x7f0000003a00)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000450000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) shutdown(r3, 0x1) 07:05:27 executing program 1: clock_gettime(0x0, &(0x7f0000003980)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ppoll(&(0x7f0000003a00)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:27 executing program 3: syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000f0f000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_TEE, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1a9902, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 07:05:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/4, 0x4) 07:05:27 executing program 3: syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000f0f000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_TEE, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1a9902, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 07:05:27 executing program 3: syz_io_uring_setup(0xccd, &(0x7f0000000080), &(0x7f000014c000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000f0f000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_TEE, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x1a9902, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 07:05:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/4, 0x4) 07:05:27 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x107f}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc53}) 07:05:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="e7b1dd79774068f4d12b0000273ed348f17d2d4b654b4908cc914f09000000fb3fe8c53d8f111058f9e14b775d8880e726a8ddda8d3d153928c0b158143f8200484b5bbc835a6325056e21e6c41923134ae6c5a26c1c4029134177dd6a80d723846bf61845c33ab4cba642ff430723b8a6e17bff010000f7518815c52e63802283820a671c1e", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:05:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000450000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) shutdown(r3, 0x1) 07:05:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/4, 0x4) 07:05:28 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x107f}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc53}) 07:05:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x18, &(0x7f0000000000), 0x20a154cc) 07:05:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="e7b1dd79774068f4d12b0000273ed348f17d2d4b654b4908cc914f09000000fb3fe8c53d8f111058f9e14b775d8880e726a8ddda8d3d153928c0b158143f8200484b5bbc835a6325056e21e6c41923134ae6c5a26c1c4029134177dd6a80d723846bf61845c33ab4cba642ff430723b8a6e17bff010000f7518815c52e63802283820a671c1e", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:05:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/4, 0x4) 07:05:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x18, &(0x7f0000000000), 0x20a154cc) 07:05:28 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x107f}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc53}) 07:05:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x9) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 07:05:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x18, &(0x7f0000000000), 0x20a154cc) 07:05:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x18, &(0x7f0000000000), 0x20a154cc) 07:05:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x9) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 07:05:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:29 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x107f}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc53}) 07:05:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x9) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 07:05:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="e7b1dd79774068f4d12b0000273ed348f17d2d4b654b4908cc914f09000000fb3fe8c53d8f111058f9e14b775d8880e726a8ddda8d3d153928c0b158143f8200484b5bbc835a6325056e21e6c41923134ae6c5a26c1c4029134177dd6a80d723846bf61845c33ab4cba642ff430723b8a6e17bff010000f7518815c52e63802283820a671c1e", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:05:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 07:05:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() 07:05:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x9) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 07:05:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 324.387395][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 324.387424][ C0] sd 0:0:1:0: tag#1803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.403980][ C0] sd 0:0:1:0: tag#1803 CDB: opcode=0xe5 (vendor) [ 324.410334][ C0] sd 0:0:1:0: tag#1803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 324.419378][ C0] sd 0:0:1:0: tag#1803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 324.428403][ C0] sd 0:0:1:0: tag#1803 CDB[20]: ba 07:05:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 07:05:31 executing program 2: clone(0x82100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3e) 07:05:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="e7b1dd79774068f4d12b0000273ed348f17d2d4b654b4908cc914f09000000fb3fe8c53d8f111058f9e14b775d8880e726a8ddda8d3d153928c0b158143f8200484b5bbc835a6325056e21e6c41923134ae6c5a26c1c4029134177dd6a80d723846bf61845c33ab4cba642ff430723b8a6e17bff010000f7518815c52e63802283820a671c1e", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:05:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000340)='./file0/bus\x00', 0x4cc40, 0x0) clone(0x20026004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) acct(&(0x7f00000000c0)='./file0/bus\x00') exit_group(0x0) acct(&(0x7f0000000100)='./file0/bus\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3efbb, 0x0) [ 324.447380][T19255] validate_nla: 1 callbacks suppressed [ 324.447400][T19255] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 07:05:31 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) [ 324.530615][T19263] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 324.539379][ C1] sd 0:0:1:0: tag#1804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.549210][ C1] sd 0:0:1:0: tag#1804 CDB: opcode=0xe5 (vendor) [ 324.555530][ C1] sd 0:0:1:0: tag#1804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 324.564585][ C1] sd 0:0:1:0: tag#1804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 324.573615][ C1] sd 0:0:1:0: tag#1804 CDB[20]: ba 07:05:31 executing program 2: clone(0x82100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3e) 07:05:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() 07:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() [ 324.589423][ C0] sd 0:0:1:0: tag#1805 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.599262][ C0] sd 0:0:1:0: tag#1805 CDB: opcode=0xe5 (vendor) [ 324.605588][ C0] sd 0:0:1:0: tag#1805 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 324.614655][ C0] sd 0:0:1:0: tag#1805 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 324.623714][ C0] sd 0:0:1:0: tag#1805 CDB[20]: 80 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.632917][ C0] sd 0:0:1:0: tag#1805 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.641981][ C0] sd 0:0:1:0: tag#1805 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.651186][ C0] sd 0:0:1:0: tag#1805 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.660223][ C0] sd 0:0:1:0: tag#1805 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.667789][ C1] sd 0:0:1:0: tag#1806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.669258][ C0] sd 0:0:1:0: tag#1805 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:05:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) [ 324.679049][ C1] sd 0:0:1:0: tag#1806 CDB: opcode=0xe5 (vendor) [ 324.688068][ C0] sd 0:0:1:0: tag#1805 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.695242][ C1] sd 0:0:1:0: tag#1806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 324.704247][ C0] sd 0:0:1:0: tag#1805 CDB[90]: 00 00 00 00 00 00 00 [ 324.720135][ C1] sd 0:0:1:0: tag#1806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 324.729176][ C1] sd 0:0:1:0: tag#1806 CDB[20]: ba 07:05:31 executing program 0: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) [ 324.743857][T19307] Process accounting resumed [ 324.760070][T19303] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 07:05:31 executing program 2: clone(0x82100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3e) [ 324.801775][ C1] sd 0:0:1:0: tag#1807 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.811647][ C1] sd 0:0:1:0: tag#1807 CDB: opcode=0xe5 (vendor) [ 324.817973][ C1] sd 0:0:1:0: tag#1807 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 324.827029][ C1] sd 0:0:1:0: tag#1807 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 324.836094][ C1] sd 0:0:1:0: tag#1807 CDB[20]: ba 07:05:31 executing program 0: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:05:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() [ 324.857511][T19312] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() 07:05:31 executing program 0: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) [ 324.927996][ C1] sd 0:0:1:0: tag#1816 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.939282][ C1] sd 0:0:1:0: tag#1816 CDB: opcode=0xe5 (vendor) [ 324.945702][ C1] sd 0:0:1:0: tag#1816 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 324.954856][ C1] sd 0:0:1:0: tag#1816 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 324.964660][ C1] sd 0:0:1:0: tag#1816 CDB[20]: ba [ 324.979460][T19330] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 325.020017][ C1] sd 0:0:1:0: tag#1825 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 325.029890][ C1] sd 0:0:1:0: tag#1825 CDB: opcode=0xe5 (vendor) [ 325.036320][ C1] sd 0:0:1:0: tag#1825 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 325.045370][ C1] sd 0:0:1:0: tag#1825 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 325.054527][ C1] sd 0:0:1:0: tag#1825 CDB[20]: ba [ 325.071635][T19341] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 325.140308][ C0] sd 0:0:1:0: tag#1826 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 325.150143][ C0] sd 0:0:1:0: tag#1826 CDB: opcode=0xe5 (vendor) [ 325.156539][ C0] sd 0:0:1:0: tag#1826 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 325.165581][ C0] sd 0:0:1:0: tag#1826 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 325.174645][ C0] sd 0:0:1:0: tag#1826 CDB[20]: 80 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.183712][ C0] sd 0:0:1:0: tag#1826 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.192755][ C0] sd 0:0:1:0: tag#1826 CDB[40]: 2e 2f 63 67 72 6f 75 70 2e 6e 65 74 2f 73 79 7a [ 325.201827][ C0] sd 0:0:1:0: tag#1826 CDB[50]: 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.210883][ C0] sd 0:0:1:0: tag#1826 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.220203][ C0] sd 0:0:1:0: tag#1826 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.229261][ C0] sd 0:0:1:0: tag#1826 CDB[80]: 63 70 75 61 63 63 74 2e 75 73 61 67 65 5f 70 65 [ 325.238552][ C0] sd 0:0:1:0: tag#1826 CDB[90]: 72 63 70 75 5f 73 79 07:05:32 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() 07:05:32 executing program 0: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:05:32 executing program 2: clone(0x82100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3e) 07:05:32 executing program 5: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:05:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getpid() [ 325.435367][ C1] sd 0:0:1:0: tag#1815 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 325.445406][ C1] sd 0:0:1:0: tag#1815 CDB: opcode=0xe5 (vendor) [ 325.446572][ C0] sd 0:0:1:0: tag#1816 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 325.451751][ C1] sd 0:0:1:0: tag#1815 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 325.461544][ C0] sd 0:0:1:0: tag#1816 CDB: opcode=0xe5 (vendor) [ 325.461559][ C0] sd 0:0:1:0: tag#1816 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 325.470580][ C1] sd 0:0:1:0: tag#1815 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 325.476878][ C0] sd 0:0:1:0: tag#1816 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 325.476894][ C0] sd 0:0:1:0: tag#1816 CDB[20]: 80 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.485905][ C1] sd 0:0:1:0: tag#1815 CDB[20]: ba [ 325.494918][ C0] sd 0:0:1:0: tag#1816 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.521816][T19357] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 07:05:32 executing program 5: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:05:32 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 325.527404][ C0] sd 0:0:1:0: tag#1816 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.527425][ C0] sd 0:0:1:0: tag#1816 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.527444][ C0] sd 0:0:1:0: tag#1816 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.562757][ C0] sd 0:0:1:0: tag#1816 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.571804][ C0] sd 0:0:1:0: tag#1816 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:05:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="a45d089c9761491350eb6c3a399b7518663c33c977f807f463338c5614f2f95573a2fafb0c1f0f5933dc1fb4d0541220f570b178583d6aa531ce980460f649cc77eb8c7e87d0b3be0417c2c01711ce6faa095e0b4a9b688d08f1838535d40541b2ff91fbadefb0531e192539767ccc299d7e1b66aef8aa7af78c81883cb08195d52239bcc81603a152a3947e10fdb80fe5224602be555e8a619a95cf95da34d9fb91c8dd0627716072cb86a4f17d025e8f60260a56f0f9835f3e676ed35f62440ad824734aefa247cf19377efc49786506ebee13aa47033f6af53ea552ed8b459d603918b83aaf681bc6f2ec7e1f314910f126d9eb4aef60c4435cc3fd6895e15090a2d073625b5e2fa485f254e51944df9b31d3aa693722203d0dd517aaf51ce433739b50d20d5ee9c495a89c0c7df6cf61fdd7af44ccb08c01e4f90327e90558a8ed682e7da1e92a688340f611db9faec06d40e6b2dae1a1fc29b807a46c965a77b8120bc9d7a0f4a7afcf033455f6b3712ea1030f5f4e3686119e789843b2dcf06a91deedd17909b5ed09913701654f1636f716937bfe97dc11a9d673a7dd83ee81", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:32 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 325.580861][ C0] sd 0:0:1:0: tag#1816 CDB[90]: 00 00 00 00 00 00 00 [ 325.604467][T19361] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 07:05:32 executing program 5: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:05:32 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:33 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) clock_settime(0x0, &(0x7f0000000140)={r0}) 07:05:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) clock_settime(0x0, &(0x7f0000000140)={r0}) 07:05:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) clock_settime(0x0, &(0x7f0000000140)={r0}) 07:05:33 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:33 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="a45d089c9761491350eb6c3a399b7518663c33c977f807f463338c5614f2f95573a2fafb0c1f0f5933dc1fb4d0541220f570b178583d6aa531ce980460f649cc77eb8c7e87d0b3be0417c2c01711ce6faa095e0b4a9b688d08f1838535d40541b2ff91fbadefb0531e192539767ccc299d7e1b66aef8aa7af78c81883cb08195d52239bcc81603a152a3947e10fdb80fe5224602be555e8a619a95cf95da34d9fb91c8dd0627716072cb86a4f17d025e8f60260a56f0f9835f3e676ed35f62440ad824734aefa247cf19377efc49786506ebee13aa47033f6af53ea552ed8b459d603918b83aaf681bc6f2ec7e1f314910f126d9eb4aef60c4435cc3fd6895e15090a2d073625b5e2fa485f254e51944df9b31d3aa693722203d0dd517aaf51ce433739b50d20d5ee9c495a89c0c7df6cf61fdd7af44ccb08c01e4f90327e90558a8ed682e7da1e92a688340f611db9faec06d40e6b2dae1a1fc29b807a46c965a77b8120bc9d7a0f4a7afcf033455f6b3712ea1030f5f4e3686119e789843b2dcf06a91deedd17909b5ed09913701654f1636f716937bfe97dc11a9d673a7dd83ee81", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:33 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) clock_settime(0x0, &(0x7f0000000140)={r0}) 07:05:33 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:34 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="a45d089c9761491350eb6c3a399b7518663c33c977f807f463338c5614f2f95573a2fafb0c1f0f5933dc1fb4d0541220f570b178583d6aa531ce980460f649cc77eb8c7e87d0b3be0417c2c01711ce6faa095e0b4a9b688d08f1838535d40541b2ff91fbadefb0531e192539767ccc299d7e1b66aef8aa7af78c81883cb08195d52239bcc81603a152a3947e10fdb80fe5224602be555e8a619a95cf95da34d9fb91c8dd0627716072cb86a4f17d025e8f60260a56f0f9835f3e676ed35f62440ad824734aefa247cf19377efc49786506ebee13aa47033f6af53ea552ed8b459d603918b83aaf681bc6f2ec7e1f314910f126d9eb4aef60c4435cc3fd6895e15090a2d073625b5e2fa485f254e51944df9b31d3aa693722203d0dd517aaf51ce433739b50d20d5ee9c495a89c0c7df6cf61fdd7af44ccb08c01e4f90327e90558a8ed682e7da1e92a688340f611db9faec06d40e6b2dae1a1fc29b807a46c965a77b8120bc9d7a0f4a7afcf033455f6b3712ea1030f5f4e3686119e789843b2dcf06a91deedd17909b5ed09913701654f1636f716937bfe97dc11a9d673a7dd83ee81", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:34 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="a45d089c9761491350eb6c3a399b7518663c33c977f807f463338c5614f2f95573a2fafb0c1f0f5933dc1fb4d0541220f570b178583d6aa531ce980460f649cc77eb8c7e87d0b3be0417c2c01711ce6faa095e0b4a9b688d08f1838535d40541b2ff91fbadefb0531e192539767ccc299d7e1b66aef8aa7af78c81883cb08195d52239bcc81603a152a3947e10fdb80fe5224602be555e8a619a95cf95da34d9fb91c8dd0627716072cb86a4f17d025e8f60260a56f0f9835f3e676ed35f62440ad824734aefa247cf19377efc49786506ebee13aa47033f6af53ea552ed8b459d603918b83aaf681bc6f2ec7e1f314910f126d9eb4aef60c4435cc3fd6895e15090a2d073625b5e2fa485f254e51944df9b31d3aa693722203d0dd517aaf51ce433739b50d20d5ee9c495a89c0c7df6cf61fdd7af44ccb08c01e4f90327e90558a8ed682e7da1e92a688340f611db9faec06d40e6b2dae1a1fc29b807a46c965a77b8120bc9d7a0f4a7afcf033455f6b3712ea1030f5f4e3686119e789843b2dcf06a91deedd17909b5ed09913701654f1636f716937bfe97dc11a9d673a7dd83ee81", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:34 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:34 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xfffffc97, 0x0, @buffer={0x0, 0x0, &(0x7f0000000700)=""/114}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d358019", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000006c0), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r0, 0x3, 0x0, 0x100000fe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x1a3, 0x0, 0x0, 0x1}, 0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:05:36 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [@not_ext={{}, @device_b}, @ext, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @device_b}, @ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @device_b}, @not_ext, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext]}}]}]}, 0x13c}}, 0x0) 07:05:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) acct(0x0) 07:05:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:36 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_buf(r0, 0x29, 0x1a, 0x0, 0x0) 07:05:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [@not_ext={{}, @device_b}, @ext, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @device_b}, @ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @device_b}, @not_ext, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext]}}]}]}, 0x13c}}, 0x0) 07:05:36 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:36 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) acct(0x0) 07:05:36 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [@not_ext={{}, @device_b}, @ext, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @device_b}, @ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @device_b}, @not_ext, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext]}}]}]}, 0x13c}}, 0x0) 07:05:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) acct(0x0) 07:05:39 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [@not_ext={{}, @device_b}, @ext, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @device_b}, @ext={{}, @broadcast}, @ext={{}, @broadcast, 0x0, @device_b}, @not_ext, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext, @ext={{}, @broadcast, 0x0, @broadcast}, @not_ext]}}]}]}, 0x13c}}, 0x0) 07:05:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) acct(0x0) 07:05:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:39 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) tkill(r1, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 2: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:05:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 07:05:42 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000080), 0xfffffffffffffffd, 0x0) 07:05:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 07:05:42 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000080), 0xfffffffffffffffd, 0x0) 07:05:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 07:05:42 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000080), 0xfffffffffffffffd, 0x0) 07:05:42 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:42 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000080), 0xfffffffffffffffd, 0x0) 07:05:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 07:05:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 07:05:43 executing program 2: syz_mount_image$nfs4(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{'noac,'}]}) 07:05:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r4, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)='u', 0x1}], 0x1) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x43}, {r2, 0xc080}, {r5}, {0xffffffffffffffff, 0x401}, {r3, 0x211b}, {r2, 0x580}], 0x8, 0x0, 0x0, 0x0) 07:05:43 executing program 2: syz_mount_image$nfs4(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{'noac,'}]}) 07:05:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 07:05:43 executing program 2: syz_mount_image$nfs4(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{'noac,'}]}) 07:05:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 07:05:43 executing program 2: syz_mount_image$nfs4(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{'noac,'}]}) 07:05:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 07:05:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 3: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x101802, 0x0) sendfile(r0, r0, 0x0, 0x4) 07:05:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0xa, &(0x7f0000000040)) 07:05:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 3: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x101802, 0x0) sendfile(r0, r0, 0x0, 0x4) 07:05:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0xa, &(0x7f0000000040)) 07:05:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0xa, &(0x7f0000000040)) 07:05:44 executing program 3: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x101802, 0x0) sendfile(r0, r0, 0x0, 0x4) 07:05:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0xa, &(0x7f0000000040)) 07:05:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 3: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x101802, 0x0) sendfile(r0, r0, 0x0, 0x4) 07:05:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:44 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000800)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x38) 07:05:45 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:45 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r0 = fork() process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xfe3d}], 0x1, 0x0) 07:05:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@dev, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}}, 0x0) 07:05:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) unlink(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000000140)='./bus\x00') 07:05:45 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000800)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x38) 07:05:45 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:45 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:45 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000800)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x38) 07:05:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@dev, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}}, 0x0) [ 338.509417][ T22] kauditd_printk_skb: 13 callbacks suppressed [ 338.509428][ T22] audit: type=1326 audit(1633935945.353:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f278eb488d9 code=0x0 07:05:45 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000800)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x38) 07:05:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@dev, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}}, 0x0) 07:05:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=f', @ANYBLOB=',rootcontext=']) [ 338.713540][T19864] 9pnet: Could not find request transport: f [ 338.729484][T19868] 9pnet: Could not find request transport: f 07:05:45 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@dev, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}]}, 0x138}}, 0x0) 07:05:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=f', @ANYBLOB=',rootcontext=']) 07:05:45 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 07:05:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=f', @ANYBLOB=',rootcontext=']) [ 339.028515][T19882] 9pnet: Could not find request transport: f [ 339.067945][T19887] SELinux: duplicate or incompatible mount options [ 339.082297][T19891] 9pnet: Could not find request transport: f [ 339.089267][T19892] SELinux: duplicate or incompatible mount options [ 339.332223][ T22] audit: type=1326 audit(1633935946.173:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19837 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f278eb488d9 code=0x0 07:05:46 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_fscache}, {@dfltuid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) 07:05:46 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=f', @ANYBLOB=',rootcontext=']) 07:05:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 07:05:46 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:46 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 339.425171][ T22] audit: type=1326 audit(1633935946.273:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19904 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f278eb488d9 code=0x0 [ 339.457556][T19909] 9pnet: Could not find request transport: f [ 339.460119][T19908] SELinux: duplicate or incompatible mount options 07:05:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_fscache}, {@dfltuid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) 07:05:46 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 07:05:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_fscache}, {@dfltuid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) [ 339.534423][T19928] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 339.542663][T19928] __nla_validate_parse: 1 callbacks suppressed [ 339.542682][T19928] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cache_fscache}, {@dfltuid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) 07:05:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 339.604997][T19931] SELinux: duplicate or incompatible mount options [ 339.682888][T19950] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 339.691073][T19950] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:47 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 07:05:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 07:05:47 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:05:47 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = syz_io_uring_setup(0x5d9e, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 340.293572][T19969] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 340.301673][T19969] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.318045][T19971] SELinux: duplicate or incompatible mount options 07:05:47 executing program 4: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 340.332810][ T22] audit: type=1326 audit(1633935947.173:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19972 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f278eb488d9 code=0x0 [ 340.357440][T19974] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 340.365583][T19974] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 07:05:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 07:05:47 executing program 4: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) [ 340.426167][T19984] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 340.434277][T19984] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() chdir(0x0) pivot_root(0x0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 07:05:47 executing program 4: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) [ 340.492877][T19988] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 340.501062][T19988] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.526530][T19992] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 340.534741][T19992] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 07:05:48 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 07:05:48 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 07:05:48 executing program 4: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 07:05:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029d9e437f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000c1e770325132510000e77032510300000000002e2e2020202020202020201000c1e770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000c1e770325132510000e770325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) 07:05:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000a8c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0xfd}}], 0x10}}], 0x2, 0x0) 07:05:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x2a}) 07:05:48 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@mode}]}) 07:05:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000a8c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0xfd}}], 0x10}}], 0x2, 0x0) [ 341.201279][T20011] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:05:48 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0xd5, 0x3) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 07:05:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000b80)=""/180, 0xb4}, 0x81}], 0x2, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) 07:05:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x2a}) 07:05:48 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8", 0x24}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x401, 0x0) [ 341.255170][ T22] audit: type=1326 audit(1633935948.104:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=20008 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f278eb488d9 code=0x0 [ 341.317238][T20028] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.509376][T20043] ==================================================================