syzkaller syzkaller login: [ 10.814559][ T23] kauditd_printk_skb: 58 callbacks suppressed [ 10.814571][ T23] audit: type=1400 audit(1636236782.415:69): avc: denied { read } for pid=449 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 10.818980][ T23] audit: type=1400 audit(1636236782.415:70): avc: denied { open } for pid=449 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 13.017918][ T23] audit: type=1400 audit(1636236784.615:71): avc: denied { transition } for pid=473 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.022204][ T23] audit: type=1400 audit(1636236784.615:72): avc: denied { write } for pid=473 comm="sh" path="pipe:[11215]" dev="pipefs" ino=11215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.799479][ T474] sshd (474) used greatest stack depth: 11528 bytes left Warning: Permanently added '10.128.1.179' (ECDSA) to the list of known hosts. 2021/11/06 22:13:11 fuzzer started 2021/11/06 22:13:11 dialing manager at 10.128.0.163:43183 [ 19.668975][ T23] audit: type=1400 audit(1636236791.265:73): avc: denied { mounton } for pid=491 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.669738][ T491] cgroup: Unknown subsys name 'net' [ 19.692399][ T23] audit: type=1400 audit(1636236791.265:74): avc: denied { mount } for pid=491 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.697648][ T491] cgroup: Unknown subsys name 'net_prio' [ 19.725367][ T491] cgroup: Unknown subsys name 'devices' [ 19.730925][ T491] cgroup: Unknown subsys name 'blkio' [ 19.736579][ T23] audit: type=1400 audit(1636236791.335:75): avc: denied { unmount } for pid=491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.823244][ T491] cgroup: Unknown subsys name 'hugetlb' [ 19.828860][ T491] cgroup: Unknown subsys name 'rlimit' 2021/11/06 22:13:11 syscalls: 2033 2021/11/06 22:13:11 code coverage: enabled 2021/11/06 22:13:11 comparison tracing: enabled 2021/11/06 22:13:11 extra coverage: enabled 2021/11/06 22:13:11 setuid sandbox: enabled 2021/11/06 22:13:11 namespace sandbox: enabled 2021/11/06 22:13:11 Android sandbox: enabled 2021/11/06 22:13:11 fault injection: enabled 2021/11/06 22:13:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/11/06 22:13:11 net packet injection: /dev/net/tun does not exist 2021/11/06 22:13:11 net device setup: enabled 2021/11/06 22:13:11 concurrency sanitizer: enabled 2021/11/06 22:13:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/11/06 22:13:11 USB emulation: /dev/raw-gadget does not exist 2021/11/06 22:13:11 hci packet injection: /dev/vhci does not exist 2021/11/06 22:13:11 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/11/06 22:13:11 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist [ 19.923251][ T23] audit: type=1400 audit(1636236791.525:76): avc: denied { mounton } for pid=491 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.948110][ T23] audit: type=1400 audit(1636236791.525:77): avc: denied { mount } for pid=491 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2021/11/06 22:13:12 suppressing KCSAN reports in functions: 'get_cpu_idle_time_us' 'ext4_fc_commit' 'exit_mm' 'generic_write_end' 'shmem_getpage_gfp' 'blk_mq_sched_dispatch_requests' '__delete_from_page_cache' '__xa_clear_mark' 'jbd2_journal_stop' 'jbd2_journal_dirty_metadata' '__fsnotify_parent' 'ext4_free_inodes_count' 'ext4_mark_iloc_dirty' 2021/11/06 22:13:12 fetching corpus: 0, signal 0/2000 (executing program) 2021/11/06 22:13:12 fetching corpus: 49, signal 8428/12264 (executing program) 2021/11/06 22:13:12 fetching corpus: 99, signal 12945/18576 (executing program) 2021/11/06 22:13:12 fetching corpus: 149, signal 18222/25508 (executing program) 2021/11/06 22:13:12 fetching corpus: 199, signal 23087/31947 (executing program) 2021/11/06 22:13:12 fetching corpus: 249, signal 26455/36895 (executing program) 2021/11/06 22:13:12 fetching corpus: 299, signal 29128/41154 (executing program) 2021/11/06 22:13:12 fetching corpus: 349, signal 32868/46281 (executing program) 2021/11/06 22:13:12 fetching corpus: 399, signal 34643/49562 (executing program) 2021/11/06 22:13:12 fetching corpus: 449, signal 38361/54491 (executing program) 2021/11/06 22:13:12 fetching corpus: 499, signal 41176/58588 (executing program) 2021/11/06 22:13:12 fetching corpus: 549, signal 42834/61623 (executing program) 2021/11/06 22:13:12 fetching corpus: 599, signal 44976/65040 (executing program) 2021/11/06 22:13:12 fetching corpus: 649, signal 46776/68147 (executing program) 2021/11/06 22:13:12 fetching corpus: 699, signal 48232/70913 (executing program) 2021/11/06 22:13:12 fetching corpus: 749, signal 49852/73827 (executing program) 2021/11/06 22:13:12 fetching corpus: 799, signal 51317/76601 (executing program) 2021/11/06 22:13:12 fetching corpus: 849, signal 52803/79346 (executing program) 2021/11/06 22:13:12 fetching corpus: 899, signal 54371/82060 (executing program) 2021/11/06 22:13:12 fetching corpus: 949, signal 55924/84692 (executing program) 2021/11/06 22:13:12 fetching corpus: 999, signal 56616/86655 (executing program) 2021/11/06 22:13:12 fetching corpus: 1049, signal 57991/89202 (executing program) 2021/11/06 22:13:12 fetching corpus: 1099, signal 59015/91450 (executing program) 2021/11/06 22:13:12 fetching corpus: 1149, signal 59949/93531 (executing program) 2021/11/06 22:13:13 fetching corpus: 1199, signal 61181/95800 (executing program) 2021/11/06 22:13:13 fetching corpus: 1249, signal 63319/98759 (executing program) 2021/11/06 22:13:13 fetching corpus: 1299, signal 64132/100711 (executing program) 2021/11/06 22:13:13 fetching corpus: 1349, signal 65241/102830 (executing program) 2021/11/06 22:13:13 fetching corpus: 1399, signal 66466/105080 (executing program) 2021/11/06 22:13:13 fetching corpus: 1449, signal 67687/107219 (executing program) 2021/11/06 22:13:13 fetching corpus: 1499, signal 68686/109182 (executing program) 2021/11/06 22:13:13 fetching corpus: 1549, signal 69295/110937 (executing program) 2021/11/06 22:13:13 fetching corpus: 1599, signal 70113/112803 (executing program) 2021/11/06 22:13:13 fetching corpus: 1649, signal 70771/114526 (executing program) 2021/11/06 22:13:13 fetching corpus: 1699, signal 71882/116525 (executing program) 2021/11/06 22:13:13 fetching corpus: 1749, signal 72647/118314 (executing program) 2021/11/06 22:13:13 fetching corpus: 1799, signal 73974/120425 (executing program) 2021/11/06 22:13:13 fetching corpus: 1849, signal 74569/122056 (executing program) 2021/11/06 22:13:13 fetching corpus: 1899, signal 75380/123787 (executing program) 2021/11/06 22:13:13 fetching corpus: 1949, signal 76010/125451 (executing program) 2021/11/06 22:13:13 fetching corpus: 1999, signal 76661/127086 (executing program) 2021/11/06 22:13:13 fetching corpus: 2049, signal 77286/128629 (executing program) 2021/11/06 22:13:13 fetching corpus: 2099, signal 78099/130338 (executing program) 2021/11/06 22:13:13 fetching corpus: 2149, signal 78904/131978 (executing program) 2021/11/06 22:13:13 fetching corpus: 2199, signal 79454/133499 (executing program) 2021/11/06 22:13:13 fetching corpus: 2249, signal 80187/135129 (executing program) 2021/11/06 22:13:13 fetching corpus: 2299, signal 80783/136620 (executing program) 2021/11/06 22:13:13 fetching corpus: 2349, signal 81428/138147 (executing program) 2021/11/06 22:13:13 fetching corpus: 2399, signal 82553/139856 (executing program) 2021/11/06 22:13:13 fetching corpus: 2448, signal 83111/141325 (executing program) 2021/11/06 22:13:13 fetching corpus: 2498, signal 84145/143001 (executing program) 2021/11/06 22:13:13 fetching corpus: 2548, signal 84750/144445 (executing program) 2021/11/06 22:13:13 fetching corpus: 2598, signal 85418/145948 (executing program) 2021/11/06 22:13:13 fetching corpus: 2648, signal 86323/147494 (executing program) 2021/11/06 22:13:13 fetching corpus: 2698, signal 87250/149065 (executing program) 2021/11/06 22:13:14 fetching corpus: 2748, signal 87887/150443 (executing program) 2021/11/06 22:13:14 fetching corpus: 2798, signal 89229/152025 (executing program) 2021/11/06 22:13:14 fetching corpus: 2848, signal 89823/153405 (executing program) 2021/11/06 22:13:14 fetching corpus: 2898, signal 90311/154690 (executing program) 2021/11/06 22:13:14 fetching corpus: 2948, signal 90843/155969 (executing program) 2021/11/06 22:13:14 fetching corpus: 2998, signal 91584/157327 (executing program) 2021/11/06 22:13:14 fetching corpus: 3048, signal 91990/158526 (executing program) 2021/11/06 22:13:14 fetching corpus: 3098, signal 92440/159786 (executing program) 2021/11/06 22:13:14 fetching corpus: 3148, signal 92929/161015 (executing program) 2021/11/06 22:13:14 fetching corpus: 3198, signal 93340/162218 (executing program) 2021/11/06 22:13:14 fetching corpus: 3248, signal 93795/163392 (executing program) 2021/11/06 22:13:14 fetching corpus: 3298, signal 94294/164608 (executing program) 2021/11/06 22:13:14 fetching corpus: 3348, signal 94716/165812 (executing program) 2021/11/06 22:13:14 fetching corpus: 3398, signal 95272/167018 (executing program) 2021/11/06 22:13:14 fetching corpus: 3448, signal 95662/168187 (executing program) 2021/11/06 22:13:14 fetching corpus: 3498, signal 96371/169399 (executing program) 2021/11/06 22:13:14 fetching corpus: 3548, signal 97033/170577 (executing program) 2021/11/06 22:13:14 fetching corpus: 3598, signal 97322/171680 (executing program) 2021/11/06 22:13:14 fetching corpus: 3648, signal 97667/172763 (executing program) 2021/11/06 22:13:14 fetching corpus: 3698, signal 98389/173928 (executing program) 2021/11/06 22:13:14 fetching corpus: 3748, signal 99191/175148 (executing program) 2021/11/06 22:13:14 fetching corpus: 3798, signal 100028/176322 (executing program) 2021/11/06 22:13:14 fetching corpus: 3848, signal 100399/177362 (executing program) 2021/11/06 22:13:14 fetching corpus: 3898, signal 100688/178393 (executing program) 2021/11/06 22:13:14 fetching corpus: 3948, signal 101217/179503 (executing program) 2021/11/06 22:13:14 fetching corpus: 3998, signal 101708/180609 (executing program) 2021/11/06 22:13:14 fetching corpus: 4048, signal 102050/181639 (executing program) 2021/11/06 22:13:14 fetching corpus: 4098, signal 102461/182656 (executing program) 2021/11/06 22:13:14 fetching corpus: 4148, signal 102870/183718 (executing program) 2021/11/06 22:13:14 fetching corpus: 4198, signal 103602/184788 (executing program) 2021/11/06 22:13:15 fetching corpus: 4248, signal 103943/185762 (executing program) 2021/11/06 22:13:15 fetching corpus: 4298, signal 104458/186741 (executing program) 2021/11/06 22:13:15 fetching corpus: 4347, signal 105053/187732 (executing program) 2021/11/06 22:13:15 fetching corpus: 4397, signal 105473/188676 (executing program) 2021/11/06 22:13:15 fetching corpus: 4447, signal 105950/189658 (executing program) 2021/11/06 22:13:15 fetching corpus: 4497, signal 106370/190595 (executing program) 2021/11/06 22:13:15 fetching corpus: 4547, signal 106685/191536 (executing program) 2021/11/06 22:13:15 fetching corpus: 4596, signal 107056/192472 (executing program) 2021/11/06 22:13:15 fetching corpus: 4646, signal 107650/193418 (executing program) 2021/11/06 22:13:15 fetching corpus: 4696, signal 108115/194378 (executing program) 2021/11/06 22:13:15 fetching corpus: 4746, signal 108574/195278 (executing program) 2021/11/06 22:13:15 fetching corpus: 4796, signal 108952/196205 (executing program) 2021/11/06 22:13:15 fetching corpus: 4846, signal 109370/197117 (executing program) 2021/11/06 22:13:15 fetching corpus: 4896, signal 109803/198030 (executing program) 2021/11/06 22:13:15 fetching corpus: 4946, signal 110268/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 4996, signal 110775/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5046, signal 111093/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5096, signal 111392/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5146, signal 111785/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5196, signal 112199/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5246, signal 112874/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5296, signal 113337/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5346, signal 113622/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5396, signal 114197/198054 (executing program) 2021/11/06 22:13:15 fetching corpus: 5446, signal 114454/198056 (executing program) 2021/11/06 22:13:15 fetching corpus: 5496, signal 114809/198059 (executing program) 2021/11/06 22:13:15 fetching corpus: 5546, signal 115286/198059 (executing program) 2021/11/06 22:13:15 fetching corpus: 5596, signal 115629/198059 (executing program) 2021/11/06 22:13:15 fetching corpus: 5646, signal 115937/198059 (executing program) 2021/11/06 22:13:15 fetching corpus: 5696, signal 116275/198059 (executing program) 2021/11/06 22:13:15 fetching corpus: 5746, signal 117387/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 5796, signal 117666/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 5846, signal 117948/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 5896, signal 118559/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 5946, signal 118950/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 5996, signal 119243/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6046, signal 119526/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6096, signal 119873/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6146, signal 120255/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6196, signal 120685/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6246, signal 121076/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6296, signal 121480/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6346, signal 121824/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6396, signal 122194/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6446, signal 122518/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6496, signal 122760/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6546, signal 123129/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6596, signal 123649/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6646, signal 123975/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6696, signal 124253/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6746, signal 124628/198059 (executing program) 2021/11/06 22:13:16 fetching corpus: 6796, signal 124872/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 6846, signal 125219/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 6896, signal 125909/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 6946, signal 126331/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 6996, signal 126647/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7046, signal 127218/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7096, signal 127480/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7146, signal 127908/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7196, signal 128174/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7246, signal 128432/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7296, signal 128778/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7346, signal 129036/198060 (executing program) 2021/11/06 22:13:16 fetching corpus: 7396, signal 129284/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7446, signal 129723/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7496, signal 130021/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7546, signal 130265/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7596, signal 130521/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7646, signal 130755/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7696, signal 131057/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7746, signal 131288/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7796, signal 131558/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7846, signal 131758/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7896, signal 131980/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7946, signal 132216/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 7996, signal 132483/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8046, signal 132752/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8096, signal 133011/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8146, signal 133485/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8196, signal 133846/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8246, signal 134560/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8296, signal 134780/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8346, signal 134986/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8395, signal 135381/198060 (executing program) 2021/11/06 22:13:17 fetching corpus: 8445, signal 135644/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8495, signal 135884/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8545, signal 136099/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8595, signal 136335/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8645, signal 136680/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8695, signal 136955/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8745, signal 137211/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8795, signal 137385/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8845, signal 137735/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8895, signal 138033/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8945, signal 138350/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 8995, signal 138575/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 9045, signal 138895/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 9095, signal 139097/198061 (executing program) 2021/11/06 22:13:17 fetching corpus: 9145, signal 139249/198061 (executing program) 2021/11/06 22:13:18 fetching corpus: 9195, signal 139424/198061 (executing program) 2021/11/06 22:13:18 fetching corpus: 9245, signal 139679/198061 (executing program) 2021/11/06 22:13:18 fetching corpus: 9295, signal 139902/198061 (executing program) 2021/11/06 22:13:18 fetching corpus: 9345, signal 140120/198061 (executing program) 2021/11/06 22:13:18 fetching corpus: 9395, signal 140357/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9445, signal 140531/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9495, signal 140800/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9545, signal 141000/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9595, signal 141279/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9645, signal 141694/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9695, signal 142046/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9745, signal 142214/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9795, signal 142426/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9845, signal 142617/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9895, signal 142811/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9945, signal 143101/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 9995, signal 143714/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10045, signal 144008/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10095, signal 144193/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10145, signal 144370/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10195, signal 144590/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10245, signal 144761/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10295, signal 145062/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10345, signal 145349/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10395, signal 145551/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10445, signal 145719/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10495, signal 145978/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10544, signal 146251/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10594, signal 147097/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10644, signal 147391/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10694, signal 147647/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10744, signal 147804/198063 (executing program) 2021/11/06 22:13:18 fetching corpus: 10794, signal 148139/198068 (executing program) 2021/11/06 22:13:18 fetching corpus: 10844, signal 148349/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 10894, signal 148662/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 10944, signal 148901/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 10994, signal 149219/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11044, signal 149474/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11094, signal 149637/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11144, signal 149839/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11194, signal 150033/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11244, signal 150267/198068 (executing program) 2021/11/06 22:13:19 fetching corpus: 11294, signal 150496/198070 (executing program) 2021/11/06 22:13:19 fetching corpus: 11344, signal 150784/198075 (executing program) 2021/11/06 22:13:19 fetching corpus: 11394, signal 150943/198075 (executing program) 2021/11/06 22:13:19 fetching corpus: 11444, signal 151106/198075 (executing program) 2021/11/06 22:13:19 fetching corpus: 11494, signal 151418/198075 (executing program) 2021/11/06 22:13:19 fetching corpus: 11544, signal 151736/198075 (executing program) 2021/11/06 22:13:19 fetching corpus: 11594, signal 151967/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11644, signal 152106/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11694, signal 152337/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11744, signal 152497/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11794, signal 152672/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11844, signal 152838/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11894, signal 153040/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11944, signal 153208/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 11994, signal 153357/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12044, signal 153565/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12094, signal 153866/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12144, signal 154036/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12194, signal 154266/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12244, signal 154449/198079 (executing program) 2021/11/06 22:13:19 fetching corpus: 12294, signal 154637/198081 (executing program) 2021/11/06 22:13:19 fetching corpus: 12344, signal 154774/198081 (executing program) 2021/11/06 22:13:19 fetching corpus: 12394, signal 155038/198081 (executing program) 2021/11/06 22:13:19 fetching corpus: 12444, signal 155313/198081 (executing program) 2021/11/06 22:13:19 fetching corpus: 12494, signal 155467/198081 (executing program) 2021/11/06 22:13:19 fetching corpus: 12544, signal 155633/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12594, signal 155850/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12644, signal 156051/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12694, signal 156217/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12744, signal 156469/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12794, signal 156640/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12844, signal 156851/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12894, signal 157065/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12944, signal 157212/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 12994, signal 157366/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 13044, signal 157590/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 13094, signal 157784/198081 (executing program) 2021/11/06 22:13:20 fetching corpus: 13144, signal 157961/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13194, signal 158119/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13244, signal 158273/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13294, signal 158502/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13344, signal 158672/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13394, signal 158900/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13444, signal 159150/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13494, signal 159345/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13544, signal 159488/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13594, signal 159785/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13644, signal 159922/198082 (executing program) 2021/11/06 22:13:20 fetching corpus: 13694, signal 160045/198084 (executing program) 2021/11/06 22:13:20 fetching corpus: 13744, signal 160231/198084 (executing program) 2021/11/06 22:13:20 fetching corpus: 13794, signal 160458/198084 (executing program) 2021/11/06 22:13:20 fetching corpus: 13844, signal 160621/198084 (executing program) 2021/11/06 22:13:20 fetching corpus: 13894, signal 160774/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 13944, signal 160959/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 13994, signal 161214/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 14044, signal 161421/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 14094, signal 161674/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 14144, signal 161836/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 14193, signal 162037/198087 (executing program) 2021/11/06 22:13:20 fetching corpus: 14243, signal 162187/198087 (executing program) 2021/11/06 22:13:21 fetching corpus: 14293, signal 162347/198087 (executing program) 2021/11/06 22:13:21 fetching corpus: 14343, signal 162601/198087 (executing program) 2021/11/06 22:13:21 fetching corpus: 14393, signal 162784/198087 (executing program) 2021/11/06 22:13:21 fetching corpus: 14443, signal 163100/198088 (executing program) 2021/11/06 22:13:21 fetching corpus: 14493, signal 163319/198088 (executing program) 2021/11/06 22:13:21 fetching corpus: 14543, signal 163489/198088 (executing program) 2021/11/06 22:13:21 fetching corpus: 14593, signal 163650/198088 (executing program) 2021/11/06 22:13:21 fetching corpus: 14643, signal 163762/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14693, signal 163951/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14743, signal 164147/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14793, signal 164343/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14843, signal 164459/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14893, signal 164633/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14943, signal 164825/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 14993, signal 164971/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15043, signal 165252/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15093, signal 165450/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15143, signal 165574/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15193, signal 165727/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15243, signal 165922/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15293, signal 166031/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15343, signal 166258/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15393, signal 166415/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15443, signal 166542/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15493, signal 166742/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15543, signal 166872/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15593, signal 167076/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15643, signal 167216/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15693, signal 167623/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15743, signal 167789/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15793, signal 167947/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15843, signal 168102/198089 (executing program) 2021/11/06 22:13:21 fetching corpus: 15893, signal 168294/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 15943, signal 168520/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 15993, signal 168654/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16043, signal 168834/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16093, signal 169018/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16143, signal 169156/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16193, signal 169344/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16243, signal 169483/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16293, signal 169590/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16343, signal 169753/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16393, signal 169914/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16443, signal 170043/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16493, signal 170177/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16543, signal 170322/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16593, signal 170462/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16643, signal 170570/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16693, signal 170703/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16743, signal 170857/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16793, signal 171052/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16843, signal 171188/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16893, signal 171399/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16943, signal 171613/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 16993, signal 171787/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 17043, signal 171958/198089 (executing program) 2021/11/06 22:13:22 fetching corpus: 17093, signal 172109/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17143, signal 172274/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17193, signal 172417/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17243, signal 172583/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17293, signal 172718/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17343, signal 172969/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17393, signal 173103/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17443, signal 173250/198091 (executing program) 2021/11/06 22:13:22 fetching corpus: 17493, signal 173399/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17543, signal 173558/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17593, signal 173722/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17643, signal 174019/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17693, signal 174267/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17743, signal 174396/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17793, signal 174560/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17843, signal 174719/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17893, signal 174851/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17943, signal 174949/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 17993, signal 175072/198091 (executing program) 2021/11/06 22:13:23 fetching corpus: 18043, signal 175210/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18093, signal 175380/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18142, signal 175547/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18192, signal 175742/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18242, signal 175908/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18292, signal 176197/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18342, signal 176312/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18392, signal 176455/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18442, signal 176609/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18492, signal 176796/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18542, signal 176953/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18592, signal 177076/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18642, signal 177246/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18692, signal 177394/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18742, signal 177552/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18792, signal 177654/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18842, signal 177783/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18892, signal 178007/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18942, signal 178194/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 18992, signal 178377/198093 (executing program) 2021/11/06 22:13:23 fetching corpus: 19042, signal 178523/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19092, signal 178713/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19142, signal 178854/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19192, signal 179017/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19242, signal 179178/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19292, signal 179300/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19342, signal 179506/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19392, signal 179648/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19442, signal 179876/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19492, signal 179993/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19542, signal 180153/198095 (executing program) 2021/11/06 22:13:24 fetching corpus: 19592, signal 180320/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19642, signal 180510/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19692, signal 180695/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19742, signal 180869/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19792, signal 180976/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19842, signal 181099/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19892, signal 181212/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19942, signal 181352/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 19992, signal 181546/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20041, signal 181710/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20091, signal 181863/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20141, signal 181981/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20191, signal 182112/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20241, signal 182235/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20291, signal 182388/198096 (executing program) 2021/11/06 22:13:24 fetching corpus: 20341, signal 182512/198098 (executing program) 2021/11/06 22:13:24 fetching corpus: 20391, signal 182638/198098 (executing program) 2021/11/06 22:13:24 fetching corpus: 20441, signal 182745/198098 (executing program) 2021/11/06 22:13:24 fetching corpus: 20491, signal 182884/198098 (executing program) 2021/11/06 22:13:24 fetching corpus: 20541, signal 183044/198099 (executing program) 2021/11/06 22:13:24 fetching corpus: 20591, signal 183207/198099 (executing program) 2021/11/06 22:13:24 fetching corpus: 20641, signal 183332/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20691, signal 183495/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20741, signal 183693/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20791, signal 183862/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20841, signal 183992/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20891, signal 184126/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20941, signal 184267/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 20991, signal 184373/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 21041, signal 184551/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 21091, signal 184704/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 21141, signal 184889/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 21191, signal 185032/198099 (executing program) 2021/11/06 22:13:25 fetching corpus: 21241, signal 185156/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21291, signal 185377/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21341, signal 185643/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21390, signal 185826/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21440, signal 185980/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21490, signal 186087/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21540, signal 186219/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21590, signal 186371/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21640, signal 186510/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21690, signal 186703/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21740, signal 186846/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21789, signal 186957/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21839, signal 187077/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21889, signal 187227/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21939, signal 187347/198119 (executing program) 2021/11/06 22:13:25 fetching corpus: 21989, signal 187534/198122 (executing program) 2021/11/06 22:13:25 fetching corpus: 22039, signal 187624/198122 (executing program) 2021/11/06 22:13:25 fetching corpus: 22089, signal 187804/198122 (executing program) 2021/11/06 22:13:25 fetching corpus: 22139, signal 187898/198122 (executing program) 2021/11/06 22:13:25 fetching corpus: 22189, signal 188039/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22238, signal 188178/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22288, signal 188358/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22338, signal 188457/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22388, signal 188588/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22438, signal 188823/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22488, signal 188928/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22538, signal 189087/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22588, signal 189262/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22638, signal 189407/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22688, signal 189545/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22738, signal 189654/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22788, signal 189787/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22838, signal 189917/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22887, signal 190048/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22937, signal 190200/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 22987, signal 190354/198122 (executing program) 2021/11/06 22:13:26 fetching corpus: 23037, signal 190497/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23087, signal 190599/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23137, signal 190711/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23187, signal 190841/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23237, signal 190933/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23287, signal 191079/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23337, signal 191201/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23387, signal 191382/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23437, signal 191497/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23487, signal 191663/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23537, signal 191816/198128 (executing program) 2021/11/06 22:13:26 fetching corpus: 23587, signal 191921/198135 (executing program) 2021/11/06 22:13:26 fetching corpus: 23637, signal 192133/198136 (executing program) 2021/11/06 22:13:26 fetching corpus: 23687, signal 192243/198136 (executing program) 2021/11/06 22:13:26 fetching corpus: 23737, signal 192416/198136 (executing program) 2021/11/06 22:13:26 fetching corpus: 23787, signal 192554/198136 (executing program) 2021/11/06 22:13:26 fetching corpus: 23837, signal 192780/198136 (executing program) 2021/11/06 22:13:26 fetching corpus: 23887, signal 192871/198147 (executing program) 2021/11/06 22:13:26 fetching corpus: 23936, signal 192995/198147 (executing program) 2021/11/06 22:13:27 fetching corpus: 23986, signal 193106/198147 (executing program) 2021/11/06 22:13:27 fetching corpus: 24036, signal 193257/198147 (executing program) 2021/11/06 22:13:27 fetching corpus: 24086, signal 193395/198147 (executing program) 2021/11/06 22:13:27 fetching corpus: 24136, signal 193515/198147 (executing program) 2021/11/06 22:13:27 fetching corpus: 24184, signal 193646/198148 (executing program) 2021/11/06 22:13:27 fetching corpus: 24234, signal 193764/198148 (executing program) 2021/11/06 22:13:27 fetching corpus: 24283, signal 193932/198148 (executing program) 2021/11/06 22:13:27 fetching corpus: 24333, signal 194082/198148 (executing program) 2021/11/06 22:13:27 fetching corpus: 24383, signal 194232/198149 (executing program) 2021/11/06 22:13:27 fetching corpus: 24433, signal 194430/198149 (executing program) 2021/11/06 22:13:27 fetching corpus: 24482, signal 194530/198149 (executing program) 2021/11/06 22:13:27 fetching corpus: 24532, signal 194637/198149 (executing program) 2021/11/06 22:13:27 fetching corpus: 24581, signal 194759/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24631, signal 194844/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24681, signal 194962/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24731, signal 195119/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24781, signal 195257/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24831, signal 195378/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24881, signal 195521/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24931, signal 195632/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 24981, signal 195720/198178 (executing program) 2021/11/06 22:13:27 fetching corpus: 25030, signal 195889/198179 (executing program) 2021/11/06 22:13:27 fetching corpus: 25080, signal 195982/198179 (executing program) 2021/11/06 22:13:27 fetching corpus: 25130, signal 196105/198179 (executing program) 2021/11/06 22:13:27 fetching corpus: 25179, signal 196253/198182 (executing program) 2021/11/06 22:13:27 fetching corpus: 25228, signal 196339/198184 (executing program) 2021/11/06 22:13:27 fetching corpus: 25248, signal 196374/198184 (executing program) 2021/11/06 22:13:27 fetching corpus: 25248, signal 196374/198184 (executing program) 2021/11/06 22:13:29 starting 6 fuzzer processes 22:13:29 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:29 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000010800)={0x10, 0x0, 0x25dfdbff, 0xffdbdf25}, 0xc) 22:13:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000000)="7ba41e4972090e82874f7e9d0a1adec0", 0x10) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000100)) 22:13:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, &(0x7f0000000500)) 22:13:29 executing program 5: clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:13:29 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu&0x&\t\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') [ 37.741595][ T23] audit: type=1400 audit(1636236809.335:78): avc: denied { execmem } for pid=500 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.825461][ T23] audit: type=1400 audit(1636236809.425:79): avc: denied { read } for pid=507 comm="syz-executor.1" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.846791][ T23] audit: type=1400 audit(1636236809.425:80): avc: denied { open } for pid=507 comm="syz-executor.1" path="net:[4026531992]" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.870139][ T23] audit: type=1400 audit(1636236809.425:81): avc: denied { mounton } for pid=507 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.891515][ T23] audit: type=1400 audit(1636236809.425:82): avc: denied { module_request } for pid=507 comm="syz-executor.1" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.913230][ T23] audit: type=1400 audit(1636236809.445:83): avc: denied { sys_module } for pid=507 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.921745][ T23] audit: type=1400 audit(1636236811.515:84): avc: denied { create } for pid=507 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.942319][ T23] audit: type=1400 audit(1636236811.515:85): avc: denied { write } for pid=507 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.962823][ T23] audit: type=1400 audit(1636236811.535:86): avc: denied { read } for pid=507 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.320863][ T23] audit: type=1400 audit(1636236817.915:87): avc: denied { mounton } for pid=507 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.456336][ T23] audit: type=1400 audit(1636236818.055:88): avc: denied { read write } for pid=507 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.480620][ T23] audit: type=1400 audit(1636236818.055:89): avc: denied { open } for pid=507 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.504713][ T23] audit: type=1400 audit(1636236818.055:90): avc: denied { ioctl } for pid=507 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 22:13:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TCSETS(r0, 0x540f, 0x0) 22:13:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$get_persistent(0x9, 0xffffffffffffffff, r1) 22:13:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="a129cfc8272571821a87fb524ca63da218f967117496ead99bdc67af9d0f1ea412ef87e6206cc0e6fd6bdfa3545278ceb1a30afb03534d3a83fc20da39da79a61d169aa74e6db405753e18e83b53024add6f26f4223e8edf4c45862bd1818577661def1b31a920306970af7237000000000000000000be190d7043979fa8a8ce227afe2e693f43565363cbc95ad713f8dc553958c1743912aeb1c5a476e58c18ff", @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYBLOB="5ea919d8c7fed7aab6bb6b5215d07cd37cef6528f3a9a33ff6a4c3bfff70f38f499884af4cd642e5ff559b3915518f2189944e254dc2cb4d077d2e"], 0x230) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 22:13:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendfile(r0, r1, 0x0, 0x8000000f) [ 46.697569][ T23] audit: type=1400 audit(1636236818.145:91): avc: denied { audit_read } for pid=3135 comm="syz-executor.1" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.730891][ T3183] loop3: detected capacity change from 0 to 87 [ 46.779287][ T23] audit: type=1400 audit(1636236818.355:92): avc: denied { mounton } for pid=3177 comm="syz-executor.3" path="/root/syzkaller-testdir092028237/syzkaller.Hmy7id/1/file1" dev="sda1" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.781939][ T3194] loop1: detected capacity change from 0 to 512 [ 46.806019][ T23] audit: type=1400 audit(1636236818.365:93): avc: denied { mount } for pid=3177 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 22:13:38 executing program 3: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='Q']) 22:13:38 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000040)={0x899650cdc8d2650e, 0x0, 0x0}) [ 46.884436][ T23] audit: type=1400 audit(1636236818.465:94): avc: denied { unmount } for pid=515 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.891080][ T3194] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.904320][ T23] audit: type=1400 audit(1636236818.465:95): avc: denied { open } for pid=3204 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.934366][ T23] audit: type=1400 audit(1636236818.465:96): avc: denied { perfmon } for pid=3204 comm="syz-executor.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.074664][ C0] sd 0:0:1:0: tag#3588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.084550][ C0] sd 0:0:1:0: tag#3588 CDB: opcode=0xe5 (vendor) [ 47.090901][ C0] sd 0:0:1:0: tag#3588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.099962][ C0] sd 0:0:1:0: tag#3588 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.109023][ C0] sd 0:0:1:0: tag#3588 CDB[20]: ba 22:13:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 3: lremovexattr(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)=@known='user.syz\x00') 22:13:39 executing program 5: clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:13:39 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x37, 0x34, 0xa]}}}, 0x2f}], [], 0x4e}) 22:13:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "008f0bec8257bc2fef002000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/2, 0x2}], 0x1) 22:13:39 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) [ 47.908109][ C0] sd 0:0:1:0: tag#3627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.917988][ C0] sd 0:0:1:0: tag#3627 CDB: opcode=0xe5 (vendor) [ 47.924379][ C0] sd 0:0:1:0: tag#3627 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.933442][ C0] sd 0:0:1:0: tag#3627 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.942497][ C0] sd 0:0:1:0: tag#3627 CDB[20]: ba 22:13:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) 22:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) r1 = fork() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x80c0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 47.954966][ T3259] tmpfs: Bad value for 'mpol' [ 47.964326][ C1] sd 0:0:1:0: tag#3628 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.974255][ C1] sd 0:0:1:0: tag#3628 CDB: opcode=0xe5 (vendor) [ 47.980585][ C1] sd 0:0:1:0: tag#3628 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.989813][ C1] sd 0:0:1:0: tag#3628 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.998857][ C1] sd 0:0:1:0: tag#3628 CDB[20]: ba 22:13:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x64}, {0x16}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 22:13:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 5: clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 48.028379][ C1] sd 0:0:1:0: tag#3629 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.038299][ C1] sd 0:0:1:0: tag#3629 CDB: opcode=0xe5 (vendor) [ 48.044662][ C1] sd 0:0:1:0: tag#3629 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 48.053740][ C1] sd 0:0:1:0: tag#3629 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.065245][ C1] sd 0:0:1:0: tag#3629 CDB[20]: ba [ 48.099543][ C0] sd 0:0:1:0: tag#3631 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.104544][ C1] sd 0:0:1:0: tag#3630 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.109424][ C0] sd 0:0:1:0: tag#3631 CDB: opcode=0xe5 (vendor) [ 48.119194][ C1] sd 0:0:1:0: tag#3630 CDB: opcode=0xe5 (vendor) [ 48.125508][ C0] sd 0:0:1:0: tag#3631 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 48.131803][ C1] sd 0:0:1:0: tag#3630 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 22:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) r1 = fork() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x80c0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) [ 48.140802][ C0] sd 0:0:1:0: tag#3631 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.149813][ C1] sd 0:0:1:0: tag#3630 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.158827][ C0] sd 0:0:1:0: tag#3631 CDB[20]: ba [ 48.167823][ C1] sd 0:0:1:0: tag#3630 CDB[20]: ba 22:13:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0xac02) read(r0, 0x0, 0x0) [ 48.212463][ C1] hrtimer: interrupt took 27124 ns 22:13:39 executing program 3: r0 = fork() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp(r2, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 22:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) r1 = fork() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x80c0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 5: clone(0x2000000002202900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:13:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) 22:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) r1 = fork() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x80c0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "060cd6bed5f770"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{r5, 0x401, 0x0, 0xfffffffffffffff8, 0x7, 0x6, 0x100000000, 0x1, 0x3, 0xc39, 0x6, 0x3, 0x9, 0x0, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) 22:13:39 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = dup2(r0, r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x4b}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 22:13:39 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240), 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3f4500001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="5a59d34f44ffd020e260a88c9921f547dcc46eb9e8340d830ba17932f7bf6beed87069b30938f4b58ee244777e8ead975bfc17eee6a7ebd089a35abb80f5a69641072ddfa2ab9b2c44b9f07727353fb1b7fe65f0b5c7062f7b0bd2f8e3395278715869931ed154b2", @ANYRES16], 0x160}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) signalfd4(r1, &(0x7f0000000940), 0x8, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat$incfs(r0, 0x0, 0x500, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0xac, 0x40, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000c80)=""/4096, 0x1000}]}, &(0x7f00000002c0)="a67d0a7f3006fb6cebfe5c86a9fef19748e7e23a7c1c140279af727e05d4031c94fc2e5b0165e79c4724567acb4d4d4a3cac54c2e7e465b3ea4f639a11b13754bf0151b9b2329f071b7794ed80204c500a4177b73928a05cd90a636a59e2f525c493317b0fdffcf233033e928c6475e1988311daf0b8c266c8408da8c355438c2dcbc944acf52d8ac6668ad4df8896ab159eca48917cc50f32c2d4b896c2820fd21c8aad9323df4c9dfde66b", &(0x7f0000000400)=""/252, 0x0, 0x4, 0xffffffffffffffff, 0x0}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) getuid() [ 48.301680][ C0] sd 0:0:1:0: tag#3632 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.311548][ C0] sd 0:0:1:0: tag#3632 CDB: opcode=0xe5 (vendor) [ 48.317909][ C0] sd 0:0:1:0: tag#3632 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 48.326955][ C0] sd 0:0:1:0: tag#3632 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.336035][ C0] sd 0:0:1:0: tag#3632 CDB[20]: ba [ 48.391436][ C1] sd 0:0:1:0: tag#3633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.395204][ C0] sd 0:0:1:0: tag#3634 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.401386][ C1] sd 0:0:1:0: tag#3633 CDB: opcode=0xe5 (vendor) [ 48.411163][ C0] sd 0:0:1:0: tag#3634 CDB: opcode=0xe5 (vendor) [ 48.417507][ C1] sd 0:0:1:0: tag#3633 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 22:13:40 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x78) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/virtio-ports', 0x840, 0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6000000000000003, 0x6) memfd_create(0x0, 0x4) fallocate(r1, 0x0, 0x100000006, 0x40000006) 22:13:40 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, r0, 0x623, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22:13:40 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0xf, 0x8) r0 = syz_io_uring_setup(0x3881, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000340)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x1}) [ 48.423938][ C0] sd 0:0:1:0: tag#3634 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 48.432961][ C1] sd 0:0:1:0: tag#3633 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.441962][ C0] sd 0:0:1:0: tag#3634 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.441980][ C0] sd 0:0:1:0: tag#3634 CDB[20]: ba [ 48.450980][ C1] sd 0:0:1:0: tag#3633 CDB[20]: ba [ 48.471546][ T3316] 9pnet_virtio: no channels available for device 127.0.0.1 22:13:40 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x363, @time}) r3 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0xc02c5341, &(0x7f0000000100)) tkill(r0, 0xb) [ 48.541637][ T3336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.555806][ T3323] 9pnet_virtio: no channels available for device 127.0.0.1 22:13:40 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240), 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3f4500001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="5a59d34f44ffd020e260a88c9921f547dcc46eb9e8340d830ba17932f7bf6beed87069b30938f4b58ee244777e8ead975bfc17eee6a7ebd089a35abb80f5a69641072ddfa2ab9b2c44b9f07727353fb1b7fe65f0b5c7062f7b0bd2f8e3395278715869931ed154b2", @ANYRES16], 0x160}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) signalfd4(r1, &(0x7f0000000940), 0x8, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat$incfs(r0, 0x0, 0x500, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0xac, 0x40, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000c80)=""/4096, 0x1000}]}, &(0x7f00000002c0)="a67d0a7f3006fb6cebfe5c86a9fef19748e7e23a7c1c140279af727e05d4031c94fc2e5b0165e79c4724567acb4d4d4a3cac54c2e7e465b3ea4f639a11b13754bf0151b9b2329f071b7794ed80204c500a4177b73928a05cd90a636a59e2f525c493317b0fdffcf233033e928c6475e1988311daf0b8c266c8408da8c355438c2dcbc944acf52d8ac6668ad4df8896ab159eca48917cc50f32c2d4b896c2820fd21c8aad9323df4c9dfde66b", &(0x7f0000000400)=""/252, 0x0, 0x4, 0xffffffffffffffff, 0x0}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) getuid() 22:13:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) [ 48.611277][ T3336] syz-executor.0 (3336) used greatest stack depth: 11176 bytes left [ 48.637944][ C0] sd 0:0:1:0: tag#3635 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.641519][ T3344] 9pnet_virtio: no channels available for device 127.0.0.1 [ 48.647824][ C0] sd 0:0:1:0: tag#3635 CDB: opcode=0xe5 (vendor) [ 48.647844][ C0] sd 0:0:1:0: tag#3635 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 48.647862][ C0] sd 0:0:1:0: tag#3635 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 48.647899][ C0] sd 0:0:1:0: tag#3635 CDB[20]: ba [ 48.698985][ T3345] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 22:13:40 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240), 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3f4500001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="5a59d34f44ffd020e260a88c9921f547dcc46eb9e8340d830ba17932f7bf6beed87069b30938f4b58ee244777e8ead975bfc17eee6a7ebd089a35abb80f5a69641072ddfa2ab9b2c44b9f07727353fb1b7fe65f0b5c7062f7b0bd2f8e3395278715869931ed154b2", @ANYRES16], 0x160}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) signalfd4(r1, &(0x7f0000000940), 0x8, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat$incfs(r0, 0x0, 0x500, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0xac, 0x40, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000c80)=""/4096, 0x1000}]}, &(0x7f00000002c0)="a67d0a7f3006fb6cebfe5c86a9fef19748e7e23a7c1c140279af727e05d4031c94fc2e5b0165e79c4724567acb4d4d4a3cac54c2e7e465b3ea4f639a11b13754bf0151b9b2329f071b7794ed80204c500a4177b73928a05cd90a636a59e2f525c493317b0fdffcf233033e928c6475e1988311daf0b8c266c8408da8c355438c2dcbc944acf52d8ac6668ad4df8896ab159eca48917cc50f32c2d4b896c2820fd21c8aad9323df4c9dfde66b", &(0x7f0000000400)=""/252, 0x0, 0x4, 0xffffffffffffffff, 0x0}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) getuid() [ 48.707328][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:13:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) 22:13:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') pipe2(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) r3 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(r4, 0x32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000592c0)={0x0, 0x0, "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", "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"}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/161, 0x3cb}], 0x1, 0x0, 0x0) 22:13:40 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240), 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="3f4500001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="5a59d34f44ffd020e260a88c9921f547dcc46eb9e8340d830ba17932f7bf6beed87069b30938f4b58ee244777e8ead975bfc17eee6a7ebd089a35abb80f5a69641072ddfa2ab9b2c44b9f07727353fb1b7fe65f0b5c7062f7b0bd2f8e3395278715869931ed154b2", @ANYRES16], 0x160}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) signalfd4(r1, &(0x7f0000000940), 0x8, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat$incfs(r0, 0x0, 0x500, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0xac, 0x40, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000c80)=""/4096, 0x1000}]}, &(0x7f00000002c0)="a67d0a7f3006fb6cebfe5c86a9fef19748e7e23a7c1c140279af727e05d4031c94fc2e5b0165e79c4724567acb4d4d4a3cac54c2e7e465b3ea4f639a11b13754bf0151b9b2329f071b7794ed80204c500a4177b73928a05cd90a636a59e2f525c493317b0fdffcf233033e928c6475e1988311daf0b8c266c8408da8c355438c2dcbc944acf52d8ac6668ad4df8896ab159eca48917cc50f32c2d4b896c2820fd21c8aad9323df4c9dfde66b", &(0x7f0000000400)=""/252, 0x0, 0x4, 0xffffffffffffffff, 0x0}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc0603d0f, 0x0) getuid() 22:13:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 48.746794][ T3345] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 48.755284][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 48.784310][ T3351] 9pnet_virtio: no channels available for device 127.0.0.1 22:13:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) [ 48.863075][ T3366] 9pnet_virtio: no channels available for device 127.0.0.1 22:13:40 executing program 3: r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8a", 0x1}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x90000010}) 22:13:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="4f40ab18910de309a4b441fd32069b10a4a36c6c4742f15a128a5ba5bb17d9a412235db9847ffe9c2c2be25aed4fa559126e5501090661c98d4613b6d7e52fd4045ed40937e124ba24aa7fef3da50ff45dd269570e28787e506f1681a074759250bace4ead0b335193733a08b1e853c2d08bf76d6cc4576ac30493649b4dc3f5f851d58d8f100712249ef3542a54b11ce895696a382d530652a29ce700000000000000000000000000000000d72311062e5385229ac8cc32da3024dc03a70cb2f187e1d49b0eb08a412c58c86801e74e704bfc14ce8e3d01ab3e24f096b7bb19fcf49424732bc1880b48ba1ff5840d2959222982262dc62dc965ae0ebd2b14559d0be5a43ac8c080ef34243ed96a5ac55a8b56b8e10875e3dc25707465481a60da8e8348871b95965a5e53fa8829e3fe0ee80235dc1268ccea23cf2ad427526aa6b6aa6208cbca52aa4477b4e398baf126"], 0x28}}, 0x4004080) 22:13:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) 22:13:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 22:13:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) 22:13:40 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa1010712, 0x4ca31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000004c0), 0x4, 0x0, 0x0, &(0x7f0000000540), 0x0) 22:13:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) 22:13:40 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000004800)={0xffffffffffffffff}, 0x0) fstatfs(r0, &(0x7f0000000000)=""/32) [ 48.974229][ T3376] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 48.974464][ T544] syz-executor.5 (544) used greatest stack depth: 10840 bytes left [ 48.982850][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 49.003049][ T3371] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 49.011412][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:13:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) 22:13:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in6=@remote}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @tfcpad={0x8}]}, 0x144}}, 0x0) 22:13:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) 22:13:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1) [ 49.088337][ T3389] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 49.096671][ T3389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:13:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) 22:13:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x1}], 0x1) 22:13:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000340)=[{0x44}, {0x20}, {0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x0) 22:13:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) [ 49.217166][ T3397] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 49.225515][ T3397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 49.244255][ T3404] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 49.252695][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:13:44 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) connect$inet(r2, &(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xb5) recvfrom$inet(r2, &(0x7f0000000040)=""/49, 0x31, 0x2, 0x0, 0x0) 22:13:44 executing program 4: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xcc1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xfffffffffffffe3f, 0x40012500, 0x0, 0xffffffffffffff49) 22:13:44 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0xff7f0000, 0x10) 22:13:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 22:13:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000d07000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) r1 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x20, 0x0, 0x0, 0x0, 0x9082, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x0, 0xca}, 0x0, 0x9, 0x4, 0x0, 0x3, 0x8001, 0x3, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmdt(r1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmdt(0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004080) 22:13:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@remote}]}]}}}], 0x20}, 0x0) [ 52.881203][ T23] kauditd_printk_skb: 27 callbacks suppressed [ 52.881224][ T23] audit: type=1400 audit(1636236824.475:124): avc: denied { create } for pid=3859 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.908407][ T23] audit: type=1400 audit(1636236824.475:125): avc: denied { write } for pid=3859 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 22:13:44 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x81001, 0x0) write$binfmt_script(r0, 0x0, 0x1029) 22:13:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x2ea180) getpeername(r1, &(0x7f0000004980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000004a00)=0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x13}}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40006, r3}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000004a40)={@mcast2, 0x1e, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f00000059c0)="1a13585fa3cce8379149818114587859155572db1e1b5032c628afbd150df2514359789a259051b2458a1b1ecec2a4a307381be4c3eed6ffc083f06d2ae9fa0c408ec203cd1a9938e7a2724397120bd701983e444717fd2c5b9cb2709b5960dde27bb25247f2a811dd72a9239c2e8a1f47126e85d7f52e7cfeebc5be656749d0882b1ee8b243d86108721362d3e9b30b054d4e59117c51a9c7a90fdb4b6550c02690fe4b4fd04c71beb55444ab9b158e1f1e0da13faa05dfcc43a194578ffa6e9b279b7e190aa0005a4dfc861ed06c9737836f8d75d7c50d404b01f7c0efe449b736906b839fdbca", 0xe8, 0x2404c000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private1, 0xffffff7f, 0x1, 0x2, 0xc, 0x8, 0x40}, 0x20) io_submit(0x0, 0x1, &(0x7f0000004d40)=[&(0x7f0000004b80)={0x0, 0x0, 0x0, 0x7, 0x6b9, r5, &(0x7f0000004a80)="c537c1a4224598573ba0353526dbe3b2b92d5041a03a06a465c48203e7206f039cc5ec7a34e097d84ef786f09cc22f8ef4efd49dd2c0a326be3caef141a7adbdfbd9fff67c268427493d31cdee743a45e4cff98eb86e67ada13f6b027d5aa15acbdc7f568d85d804dd32f0d98353c255835986907ae67af88b5a7f3b56e12f730beddbbe066f3925a70485942cec8ccf388d5cc6fa53ad4c9b8fc6ca49968dfd99992968ded866875ec64ed0ba9acd83447bdce62f3e02f890ca14a831a538c376aa1b4a3ce588e361722af7fce8ceb7d3e82afffd61edaabd5554c740fe4ad709503695876f5cda419e74", 0xeb, 0xffffffff, 0x0, 0x3, r1}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890c, &(0x7f00000002c0)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) 22:13:44 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x2200056, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') acct(0x0) [ 52.940755][ T3869] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 52.949216][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 22:13:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 22:13:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) 22:13:44 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000240)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r2 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) truncate(&(0x7f0000000300)='./bus\x00', 0x1) [ 53.008728][ T3880] ======================================================= [ 53.008728][ T3880] WARNING: The mand mount option has been deprecated and [ 53.008728][ T3880] and is ignored by this kernel. Remove the mand [ 53.008728][ T3880] option from the mount to silence this warning. [ 53.008728][ T3880] ======================================================= 22:13:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 53.070094][ T3885] loop0: detected capacity change from 0 to 262160 [ 53.094506][ T23] audit: type=1400 audit(1636236824.585:126): avc: denied { write } for pid=3876 comm="syz-executor.2" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 53.118029][ T23] audit: type=1400 audit(1636236824.605:127): avc: denied { connect } for pid=3875 comm="syz-executor.1" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.138789][ T23] audit: type=1400 audit(1636236824.605:128): avc: denied { ioctl } for pid=3875 comm="syz-executor.1" path="socket:[12784]" dev="sockfs" ino=12784 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.163985][ T23] audit: type=1400 audit(1636236824.605:129): avc: denied { create } for pid=3875 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.174247][ T3880] Process accounting resumed [ 53.184675][ T23] audit: type=1400 audit(1636236824.645:130): avc: denied { mount } for pid=3879 comm="syz-executor.5" name="/" dev="ramfs" ino=12794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.212004][ T23] audit: type=1400 audit(1636236824.785:131): avc: denied { unmount } for pid=506 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.232326][ T23] audit: type=1400 audit(1636236824.815:132): avc: denied { mounton } for pid=3879 comm="syz-executor.5" path="/root/syzkaller-testdir006905018/syzkaller.UoKoGV/2/file0" dev="ramfs" ino=12794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=dir permissive=1 [ 53.255822][ T3895] Process accounting resumed [ 53.302379][ T23] audit: type=1400 audit(1636236824.865:133): avc: denied { unmount } for pid=3409 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 22:13:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x1b, 0x5b, 0x7, 0x7, 0x2e, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 22:13:45 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x4, 0x0) 22:13:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 22:13:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 22:13:45 executing program 0: perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 22:13:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 22:13:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x18) 22:13:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000380)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 22:13:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="48bb"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 22:13:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00205000feff000000f30000450000150000e995b029"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 22:13:45 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x0) 22:13:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001980), 0x12) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x5, 0x0) 22:13:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x7, &(0x7f0000000000), 0x20a154cc) 22:13:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f00000000c0)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x2e, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 22:13:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd2710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000001340)=[{&(0x7f00000006c0)="17d46b49a76df99b", 0x8}], 0x8) 22:13:45 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001980), 0x12) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x5, 0x0) 22:13:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 22:13:45 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="140000ad1ac82c0800a143"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 22:13:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5b, 0x0, 0x7, 0x0, 0x31, 0x0, 0x30, 0x0, 0x71, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 22:13:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x10e, 0x9, &(0x7f0000000000), 0x20a154cc) 22:13:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000004a001f0014f9f407000904000a0007109052579411cb7afafbcead6d10000100", 0x24) 22:13:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x438fc, &(0x7f0000000040)={0x0, 0x0, 0x10}) dup2(r2, r3) read(r0, 0x0, 0x0) 22:13:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x6c}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 54.477633][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 22:13:46 executing program 3: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 22:13:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001980), 0x12) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x5, 0x0) 22:13:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f00000000c0)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x2e, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 22:13:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 22:13:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001980), 0x12) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x5, 0x0) 22:13:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x8) 22:13:46 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 22:13:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="2cbb16f5693d8c3e3129a0822cac7b9feeb3891aa323ece619b1211ed318389fe5e785e9f54d044984addd17fc7de00fa1c10e93f9df80782f30b777a9dd6a5eb0f9adbff26a7d2e7879221a433315117d551c2262d3acc9bb5de2c66a09b2babcbaba18237c727f26c31b5d52", 0x6d}, {&(0x7f0000001300)="1c36d9ba086d16fcef3f308ef2ee344e64321af1948f55512bf1080e0246ae0b52306455be4b7d8d8b0eaa9843c0c61c7786a2d37081a870c8b8500d76ef92a59b3ec8c1f3c9a2f2fd5b273a447fa5eb1a457b11ff89c64f05fe4686cb2529f45d8e5911cc59cfd9f22f03195fb9f07f5dae13f6e60f609faaf5ae96931b3dd4f11332844d274b9137d17e9e1525d000d5312ca230eb0c95f02b90b6879411defcb88b49bf788cd55033e4a4903fe3dc25a7e6349d0d9bae8f0f9c32b1c67eae5f82ba3873371721e00843beb6d1b7fd55400aed5aac4131c9577ccf7cc53c0a280e38e851dd2fcbb8012fb77a0cc5207eb368d0e54261f6a5bd507e56ee5280397747c36a1e8d776036f71f08b1cd3d482f98ac7a55b1464f0b1e40d0b92119890a2d74d94e573a6a86e9085fc9698ef88f39001a7ff3dcee6f0c1323111244d7343f728ed39806e7d65ddad842f9fd59733dca63375d98ae60b743d6a4bc68518a90d36050017275868d044232a93db1187c0b352400df0c2e356154c0cc2ae2f615eccc03d1d113553879e1715540463dc372a456858bb1b3427d79ba4fa661c64fbd9ff7fd7311180cbab68b6754c904a0105d3346d27bd398e13ef259d617fa8ef5aa65b002eb929d99bca170f8dfd6b74e4b9f9a236949c1b5531b0e3ee04b61ddc8b0bb5ada79395595296bef4c14e1b10279cd3515fbbe9d85abfd92a55e09d5b63e11e9b386f591cad9165f969b92c8e9a1e5c6c4471419a686566d2d543a70a3e171e9b8066c1208e4264e1efe38b8e17d668c85b688cf3b987e51dc8d3ac95fb55624d29b5fec1c138513957cd77889012fa124a5512b014dbb1633332e45387a344dd7dfefa9320af2219a6b7b2463b6a12d647d948f4bf13dfb6e166d3b56b2b18bedb6c778221bdd43b085c9856e7473998a6363ae697316f17f0ffeb63c464882e6d8ee86fc1ea569ebdcd84f4766460272579fd7e0e07fc5e322156c692d0c38027fedf89a2f71b7842bf075040b045af8992830b4fa76620b115a04759631d1f4e7e7d6da241ce46f0ded91c8d446ac866b30c0e9a70768a8d75ea12a8e4e1d68f99f4fdc6988233a8c93a7e251eca1f94fb9a657488875e150d4060000c2c6ce0806cbeb5e84abad3741941de5123b4034d5e8d844ef4e5d57e7899611491f8db46e03db00b9fc05445e200bc1abfbe1221ab5da6e94bf8bdd404296167990d71cc459ddce8b0345ccdfa99aeac08358f61fbf6354247c2bc8e05572bbf10bb34d86f458b580368ba71788bb498fa0fbf9c9ea8a3560b578eff75758067a5b70e73d3bf163717065bcd962ee99def7e39e1cc52bb986f7f37bb0399f49d8bb88ff5ce20a891d31dd602e4a906a0d186737e141b9675954ad9a18bd79d5dc17b0301309a10a3abc9fcf83fe5afb21e2853765609029ca7dabbfcb8d89c64757c59226e74b51fbd06c49e8bbd47061caf101dbde41363fa01dc8823d0c9253d73396e97547c740684b999f1fa59a242b0f90bd5ae7f99c64f60f140945d940edb57a8a6a1243343b623f09e90363465e1a4c52f3afd9935f5b0f19155e1daa5f82d6b3e48ff0ce2a5b1ea529e37cdd3ed7ec356be0333bb857803c828a0cd47989c50827a489a2427a6480c2d2d94776c23c1dc28cd6075cc3c571763e126e613c5ae6e6fe1048f5315067805988a79f00c2133e89ac79a4a3940112dc22e7b6d6d2484ed01ddb20626fa014ef41763d391d8ea7d348858c474b9c85fd42f5face2eb0035c96ab09d9771f8632ed6f667b13df7c7db8fcb9cb9e85c044a37e08bb74bd627f3693b55a830e12f3cfc8b9af646a07c7cb17dff381b651e9e1a9634adef9760db3eec4cc0e3e864811ed4c715cc79e6fbd294c79a59d15b6d76c1813f766987e03dd0c72e4a1dddd8b86c659e63a731219abdd13c1e033775281af58b99b2f5c37fcceeceeb7fc674bbea3af3b7c0b2d1866b07b3024a52aa543ac46ddb720c964dfe8ef98155a689d4815ad5faee16b93d8009a62ee17d31cf8d52b313ff8c346d30ca122e67d37ea0e4f845610c15592cfd3d27292fe97d3197fbbc51cf00d14b0bf70823d9cfd9da540acf692aba3f49906e843c513cfe04d2a8abf11e75c547e10345ed457cf8ce2f1f498193a38bc4b23f8d1ce788dad48df4db84ed0dfee286176a500745a229b61", 0x618}], 0x2) 22:13:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x200000000000c8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0xcf, 0x0, 0x0) 22:13:46 executing program 2: setreuid(0xee01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setresgid(0xee00, 0x0, 0x0) r1 = gettid() sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 22:13:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="da", 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 22:13:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 22:13:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 22:13:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffffff9}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff8000}]}) creat(&(0x7f0000000140)='./bus\x00', 0x0) 22:13:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f00000000c0)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x2e, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 22:13:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 22:13:46 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fchdir(r0) 22:13:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000), 0x0) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x688, 0x40, 0x47, 0x1000], 0x4, &(0x7f0000000400)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x100, 0x4, 0x2, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c81, 0xfffffffffffffffe) 22:13:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)='5', 0x1}], 0x1) 22:13:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 22:13:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x2, &(0x7f0000000000)=0x7f, 0x2) sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[{0x18, 0x1, 0x1, ']'}], 0x18}}], 0x2, 0x0) 22:13:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0xee, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 22:13:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB=']']) 22:13:46 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=local=static:N\n']) 22:13:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@mcast2, 0x0, 0x1}, 0x20) 22:13:46 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=local=static:N\n']) [ 55.213933][ T4038] deleting an unspecified loop device is not supported. [ 55.224646][ T4039] tmpfs: Bad value for 'mpol' [ 55.244189][ T4042] tmpfs: Bad value for 'mpol' [ 55.284686][ T4047] tmpfs: Bad value for 'mpol' 22:13:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f00000000c0)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x2e, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 22:13:47 executing program 3: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/70}, 0x4e, 0x3, 0x3800) r0 = msgget(0x3, 0x240) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/81}, 0x59, 0x0, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/64}, 0x48, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000007c0)={0x3}, 0x8, 0x0) 22:13:47 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=local=static:N\n']) 22:13:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 55.454006][ T4061] tmpfs: Bad value for 'mpol' [ 55.631096][ T4058] ================================================================== [ 55.639529][ T4058] BUG: KCSAN: data-race in get_cpu_iowait_time_us / tick_irq_enter [ 55.647649][ T4058] [ 55.649961][ T4058] write to 0xffff888237d1debc of 1 bytes by interrupt on cpu 1: [ 55.657568][ T4058] tick_irq_enter+0x178/0x240 [ 55.662230][ T4058] sysvec_apic_timer_interrupt+0x80/0xb0 [ 55.667962][ T4058] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.674035][ T4058] acpi_idle_enter+0x282/0x300 [ 55.678913][ T4058] cpuidle_enter_state+0x2b4/0x7d0 [ 55.684099][ T4058] cpuidle_enter+0x3c/0x60 [ 55.688613][ T4058] do_idle+0x1b2/0x250 [ 55.692682][ T4058] cpu_startup_entry+0x15/0x20 [ 55.697444][ T4058] secondary_startup_64_no_verify+0xb1/0xbb [ 55.703318][ T4058] [ 55.705627][ T4058] read to 0xffff888237d1debc of 1 bytes by task 4058 on cpu 0: [ 55.713180][ T4058] get_cpu_iowait_time_us+0x6b/0x1f0 [ 55.718472][ T4058] show_stat+0x374/0xdd0 [ 55.722787][ T4058] seq_read_iter+0x2e1/0x930 [ 55.727381][ T4058] proc_reg_read_iter+0xd6/0x170 [ 55.732390][ T4058] io_issue_sqe+0xbf6/0x5680 [ 55.736958][ T4058] __io_queue_sqe+0x20/0x450 [ 55.741531][ T4058] io_submit_sqe+0x77a/0x47d3 [ 55.746187][ T4058] io_submit_sqes+0x25d/0x670 [ 55.750858][ T4058] __se_sys_io_uring_enter+0x212/0xb00 [ 55.756298][ T4058] __x64_sys_io_uring_enter+0x74/0x80 [ 55.761651][ T4058] do_syscall_64+0x44/0xa0 [ 55.766046][ T4058] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.771935][ T4058] [ 55.774239][ T4058] value changed: 0x05 -> 0x00 [ 55.778903][ T4058] [ 55.781212][ T4058] Reported by Kernel Concurrency Sanitizer on: [ 55.787336][ T4058] CPU: 0 PID: 4058 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 55.795642][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.805762][ T4058] ================================================================== 22:13:47 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000100)={0x400}, 0x10) clone(0xc8244480, 0x0, 0x0, 0x0, 0x0) 22:13:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, "6c8bc899144aec94c63b53aa83863f17b6bcb2"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 22:13:47 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='mpol=local=static:N\n']) 22:13:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 22:13:47 executing program 3: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/70}, 0x4e, 0x3, 0x3800) r0 = msgget(0x3, 0x240) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/81}, 0x59, 0x0, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/64}, 0x48, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000007c0)={0x3}, 0x8, 0x0) 22:13:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x62000212) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000c4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200000c4) 22:13:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 22:13:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2c}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:13:47 executing program 5: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="66530702000000422c8f8d70e7e20668e5347d86ad6ab8028f10a813faa76c4bfc8fb6eb660bc2e5f63bbf53fa81d0b76ad9b6aee2ad76cfb7d2117c90a27ab8dc8f2b1b2e705560ceca7384eb81af410cb9c52e619c1b97b4", 0x59}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x17) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 56.013802][ T4073] tmpfs: Bad value for 'mpol' 22:13:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x62000212) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000c4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200000c4) 22:13:47 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) mmap$binder(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}]) 22:13:47 executing program 3: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/70}, 0x4e, 0x3, 0x3800) r0 = msgget(0x3, 0x240) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/81}, 0x59, 0x0, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/64}, 0x48, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000007c0)={0x3}, 0x8, 0x0) 22:13:47 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x2103, 0x0) 22:13:47 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0) r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r1, 0x0) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40f40, 0x0) 22:13:47 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x62000212) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000c4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200000c4) 22:13:47 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x62000212) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000c4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200000c4) 22:13:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7761, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 22:13:47 executing program 3: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)) msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/70}, 0x4e, 0x3, 0x3800) r0 = msgget(0x3, 0x240) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/81}, 0x59, 0x0, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/64}, 0x48, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000007c0)={0x3}, 0x8, 0x0) 22:13:47 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) [ 56.146764][ C0] scsi_io_completion_action: 5 callbacks suppressed [ 56.146789][ C0] sd 0:0:1:0: tag#3596 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 56.163305][ C0] sd 0:0:1:0: tag#3596 CDB: opcode=0xe5 (vendor) [ 56.169657][ C0] sd 0:0:1:0: tag#3596 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 56.178696][ C0] sd 0:0:1:0: tag#3596 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 56.187748][ C0] sd 0:0:1:0: tag#3596 CDB[20]: ba 22:13:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x14}, {0x44}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:13:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x7, 0x4, 0xa}]}}}], 0x18}}], 0x1, 0x0) 22:13:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) truncate(&(0x7f0000000140)='./file0\x00', 0x2) fallocate(r0, 0x10, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 22:13:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 56.339582][ C1] sd 0:0:1:0: tag#3624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 56.349487][ C1] sd 0:0:1:0: tag#3624 CDB: opcode=0xe5 (vendor) [ 56.355854][ C1] sd 0:0:1:0: tag#3624 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 56.364946][ C1] sd 0:0:1:0: tag#3624 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 56.374022][ C1] sd 0:0:1:0: tag#3624 CDB[20]: ba [ 56.385862][ C1] sd 0:0:1:0: tag#3627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 56.395847][ C1] sd 0:0:1:0: tag#3627 CDB: opcode=0xe5 (vendor) [ 56.402173][ C1] sd 0:0:1:0: tag#3627 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 56.411213][ C1] sd 0:0:1:0: tag#3627 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 56.420265][ C1] sd 0:0:1:0: tag#3627 CDB[20]: ba 22:13:48 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) 22:13:48 executing program 3: creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) quotactl(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) 22:13:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xfff}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 22:13:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:48 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) [ 57.060755][ C0] sd 0:0:1:0: tag#3636 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.070620][ C0] sd 0:0:1:0: tag#3636 CDB: opcode=0xe5 (vendor) [ 57.072474][ C1] sd 0:0:1:0: tag#3637 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.077004][ C0] sd 0:0:1:0: tag#3636 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.086811][ C1] sd 0:0:1:0: tag#3637 CDB: opcode=0xe5 (vendor) [ 57.095827][ C0] sd 0:0:1:0: tag#3636 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 22:13:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) [ 57.102148][ C1] sd 0:0:1:0: tag#3637 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.111169][ C0] sd 0:0:1:0: tag#3636 CDB[20]: ba [ 57.112132][ C0] sd 0:0:1:0: tag#3638 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.120200][ C1] sd 0:0:1:0: tag#3637 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.125304][ C0] sd 0:0:1:0: tag#3638 CDB: opcode=0xe5 (vendor) [ 57.125319][ C0] sd 0:0:1:0: tag#3638 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 22:13:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 57.135131][ C1] sd 0:0:1:0: tag#3637 CDB[20]: ba [ 57.144155][ C0] sd 0:0:1:0: tag#3638 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.173721][ C0] sd 0:0:1:0: tag#3638 CDB[20]: ba 22:13:48 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:48 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) 22:13:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 57.213654][ C1] sd 0:0:1:0: tag#3645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.223559][ C1] sd 0:0:1:0: tag#3645 CDB: opcode=0xe5 (vendor) [ 57.229910][ C1] sd 0:0:1:0: tag#3645 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.238971][ C1] sd 0:0:1:0: tag#3645 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.248127][ C1] sd 0:0:1:0: tag#3645 CDB[20]: ba 22:13:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 57.268767][ C0] sd 0:0:1:0: tag#3647 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.278654][ C0] sd 0:0:1:0: tag#3647 CDB: opcode=0xe5 (vendor) [ 57.285001][ C0] sd 0:0:1:0: tag#3647 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.294039][ C0] sd 0:0:1:0: tag#3647 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.298265][ C1] sd 0:0:1:0: tag#3584 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.303072][ C0] sd 0:0:1:0: tag#3647 CDB[20]: ba [ 57.312958][ C1] sd 0:0:1:0: tag#3584 CDB: opcode=0xe5 (vendor) [ 57.324415][ C1] sd 0:0:1:0: tag#3584 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.333439][ C1] sd 0:0:1:0: tag#3584 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.342619][ C1] sd 0:0:1:0: tag#3584 CDB[20]: ba [ 57.373225][ C0] sd 0:0:1:0: tag#3588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 57.383131][ C0] sd 0:0:1:0: tag#3588 CDB: opcode=0xe5 (vendor) [ 57.389462][ C0] sd 0:0:1:0: tag#3588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 57.398554][ C0] sd 0:0:1:0: tag#3588 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 57.407596][ C0] sd 0:0:1:0: tag#3588 CDB[20]: ba 22:13:49 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 57.768125][ T4149] syz-executor.5 (4149) used greatest stack depth: 10232 bytes left 22:13:49 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) 22:13:49 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {0x0}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}, {0x0}], 0x0, &(0x7f0000014a00)) 22:13:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x1, "00000000e600"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) getsockname$unix(r4, &(0x7f0000000140), &(0x7f0000000040)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x69, 0x80, 0x7, 0x0, 0x0, 0x81, 0x240, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb4, 0x1, @perf_config_ext={0x0, 0x9}, 0x2c, 0xffffffff, 0x6, 0x1, 0x4, 0x8, 0xff, 0x0, 0x1ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x5, r1, 0x2) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e2f66696c2ba8fa4978653000"/23], &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8000, &(0x7f0000000300)='debugfs\x00') acct(&(0x7f0000000240)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) [ 58.044566][ T4190] loop3: detected capacity change from 0 to 4096 [ 58.070261][ T4190] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 22:13:50 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000a000106000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 22:13:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='status\x00') rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000000)="26da454442dc2500008020c48139f6c6c4e3a56ca80b000000fff3430f6f0742dff441cd48400f1bce260f15c7c4219d64add98e8d6c", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) read$rfkill(r0, &(0x7f0000000180), 0x11d) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000280)=[{r0, 0xc110}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x6]}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f0000000240)=0x1f, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r0, 0x1014}, {r3, 0x220}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8) 22:13:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@dev, 0x800, 0x2}, 0x20) 22:13:50 executing program 3: set_mempolicy(0x1, &(0x7f0000000040)=0x3f, 0x1ff) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_pktinfo(r0, 0x0, 0x4, &(0x7f0000000000)={0x0, @local, @multicast2}, 0xc) [ 58.416936][ T4196] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 58.432101][ T23] kauditd_printk_skb: 35 callbacks suppressed [ 58.432114][ T23] audit: type=1400 audit(1636236830.025:169): avc: denied { name_bind } for pid=4197 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.459691][ T23] audit: type=1400 audit(1636236830.025:170): avc: denied { node_bind } for pid=4197 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 22:13:50 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) 22:13:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x4d}, {0x4d}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:13:50 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='\xd9\xaf\x97') madvise(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x15) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:13:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}, 0x80000001) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x102) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) splice(r5, &(0x7f00000000c0)=0xec5f, r0, &(0x7f0000000100)=0xffffffff, 0x9, 0x1) close(r1) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r1, r4, 0x0, 0x20102d) [ 58.638359][ T23] audit: type=1400 audit(1636236830.235:171): avc: denied { map } for pid=4207 comm="syz-executor.2" path="socket:[13805]" dev="sockfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.638388][ T4214] ------------[ cut here ]------------ [ 58.638407][ T4214] trying to isolate tail page 22:13:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}, 0x80000001) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x20, 0x1e, 0xd01, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="5b2d457dc93ae31847"]}]}, 0x20}], 0x1}, 0x0) [ 58.638428][ T23] audit: type=1400 audit(1636236830.235:172): avc: denied { read } for pid=4207 comm="syz-executor.2" path="socket:[13805]" dev="sockfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.696684][ T4214] WARNING: CPU: 0 PID: 4214 at mm/vmscan.c:2195 isolate_lru_page+0x338/0x340 [ 58.705577][ T4214] Modules linked in: [ 58.709998][ T4214] CPU: 0 PID: 4214 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 58.718514][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.728788][ T4214] RIP: 0010:isolate_lru_page+0x338/0x340 [ 58.734548][ T4214] Code: ff 48 ff cb 48 89 d8 e9 e9 fd ff ff 48 ff cb 49 89 dd e9 11 fe ff ff e8 16 79 f1 ff 48 c7 c7 54 6a 3c 83 31 c0 e8 48 da d8 ff <0f> 0b e9 4d fd ff ff 90 55 41 57 41 56 41 55 41 54 53 48 81 ec d8 [ 58.754376][ T4214] RSP: 0018:ffffc90000b23b10 EFLAGS: 00010246 [ 58.754919][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 58.760558][ T4214] RAX: 7f5203d62b4e2d00 RBX: ffffea00041dc200 RCX: 0000000000040000 [ 58.760583][ T4214] RDX: ffffc90003662000 RSI: 00000000000056e8 RDI: 00000000000056e9 [ 58.760606][ T4214] RBP: 0000000000000001 R08: ffffffff81164ebd R09: 0001ffff834987f7 [ 58.794227][ T4214] R10: 0001ffffffffffff R11: ffff88812d073000 R12: ffffea00041dc280 [ 58.802328][ T4214] R13: ffffea00041dc280 R14: ffffea00041dc200 R15: ffffea00041dc288 [ 58.810477][ T4214] FS: 00007fda3a8d7700(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 58.819627][ T4214] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.826277][ T4214] CR2: 0000000020000041 CR3: 000000010756d000 CR4: 00000000003506f0 [ 58.834386][ T4214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.842508][ T4214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.850586][ T4214] Call Trace: [ 58.853927][ T4214] [ 58.856918][ T4214] madvise_cold_or_pageout_pte_range+0x4aa/0x680 [ 58.863438][ T4214] ? swapin_walk_pmd_entry+0x2f0/0x2f0 [ 58.868978][ T4214] __walk_page_range+0x981/0x1160 [ 58.874168][ T4214] walk_page_range+0x131/0x300 [ 58.879147][ T4214] do_madvise+0xa0b/0x1140 [ 58.883708][ T4214] ? __this_cpu_preempt_check+0x18/0x20 [ 58.889428][ T4214] __x64_sys_madvise+0x5d/0x70 [ 58.894352][ T4214] do_syscall_64+0x44/0xa0 [ 58.898897][ T4214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.905118][ T4214] RIP: 0033:0x7fda3cb60ae9 [ 58.909607][ T4214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.929327][ T4214] RSP: 002b:00007fda3a8d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 58.938127][ T4214] RAX: ffffffffffffffda RBX: 00007fda3cc73f60 RCX: 00007fda3cb60ae9 [ 58.946177][ T4214] RDX: 0000000000000015 RSI: 0000000000001000 RDI: 000000002000a000 [ 58.954268][ T4214] RBP: 00007fda3cbbaf25 R08: 0000000000000000 R09: 0000000000000000 [ 58.962417][ T4214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.970466][ T4214] R13: 00007ffeafcafe6f R14: 00007fda3a8d7300 R15: 0000000000022000 [ 58.978548][ T4214] [ 58.981718][ T4214] ---[ end trace 1ad4ca28177ada47 ]--- 22:13:50 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:13:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}, 0x80000001) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 4: set_mempolicy(0x3, &(0x7f0000000480)=0x7, 0xdf) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x3) 22:13:50 executing program 1: unshare(0x4000680) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000002080)="62e4ff424c15c60ca054fa5d92183786", 0x10) 22:13:50 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4008fa, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x1d, 0x0, "943d019217beaf5c81e1b8e79d20e4889797c3fd0237e95449d7f97ad216408f670826f609eec1e55c7d7ff1e651fc28adb1796ff42a4b289d8e4265b818fbf9771bab5df84a0e5a7ddb6cbd49631547"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, "0cdd802ce55d718df28a280425c36c5e26d06de31477ffba91f4170e2f12102ba3525f55b446cd0edff0bdbc49b7a81ecb246fa70af0206ea8739a43bd78f7b9ab488b7c29a328dedcd3ee3585146f99"}, 0xd8) 22:13:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xb004}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:13:50 executing program 4: set_mempolicy(0x3, &(0x7f0000000480)=0x7, 0xdf) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x3) 22:13:50 executing program 1: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r1 = gettid() tkill(r1, 0x3a) r2 = socket$inet(0x2, 0x3, 0x2) ppoll(&(0x7f0000000080)=[{r0}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) 22:13:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}, 0x80000001) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x4, 0x0, &(0x7f0000000240)) 22:13:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000001c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x18102a, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x865410, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000200)=""/138, 0xbe}, {&(0x7f00000003c0)=""/242, 0x200008b2}, {&(0x7f0000001380)=""/237, 0xfc36}], 0xd, 0x1100, 0x0) 22:13:50 executing program 0: add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0099872b", 0x4, 0xfffffffffffffffc) 22:13:50 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) [ 59.120624][ T23] audit: type=1400 audit(1636236830.715:173): avc: denied { mount } for pid=4248 comm="syz-executor.2" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 22:13:50 executing program 4: set_mempolicy(0x3, &(0x7f0000000480)=0x7, 0xdf) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x3) 22:13:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x25}, {0x3c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 59.185215][ T4261] dns_resolver: Unsupported content type (153) [ 59.204956][ T23] audit: type=1400 audit(1636236830.745:174): avc: denied { mounton } for pid=4248 comm="syz-executor.2" path="/root/syzkaller-testdir542537254/syzkaller.vzisGb/34/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 22:13:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}}}, 0xe8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda5ba8d47d34f3904cf12dba000000", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') renameat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in=@local, 0x4e21, 0x0, 0x4e21, 0x4, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80}, {0x1, 0x2, 0x4, 0x3ff}, 0x80000001, 0x6e6bb2, 0x2, 0x1, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d3, 0x6c}, 0xa, @in6=@mcast1, 0x34ff, 0x4}}, 0xe8) gettid() wait4(0x0, 0x0, 0x0, 0x0) 22:13:50 executing program 2: r0 = getpgid(0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, r2, 0x0) [ 59.213077][ T4261] dns_resolver: Unsupported content type (153) [ 59.231755][ T23] audit: type=1400 audit(1636236830.745:175): avc: denied { remount } for pid=4248 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.257857][ T23] audit: type=1400 audit(1636236830.785:176): avc: denied { write } for pid=4258 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 22:13:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000043c0)=[{&(0x7f00000001c0)="b50c92a47ed5b318137f239032c41e26cef7da7ef39b6e21da7424f213f49c5e1b5dc0", 0x23}], 0x1) 22:13:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=unix']) 22:13:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1}, {@in=@multicast1, 0x0, 0x6c}, @in6=@dev}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushsa={0x14, 0x1c, 0xf}, 0x14}}, 0x0) 22:13:50 executing program 1: io_setup(0x71, &(0x7f0000000040)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 22:13:50 executing program 4: set_mempolicy(0x3, &(0x7f0000000480)=0x7, 0xdf) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x3) 22:13:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 59.290570][ T23] audit: type=1400 audit(1636236830.885:177): avc: denied { unmount } for pid=511 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 22:13:50 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x1d, 0x0, "31b9dc310569594e130f505c107f8d0ef68788682e9ebd4ab7fa8a2ba3798af3d9fb9dbc25a486a34563b5a7257de850b2b47d69b5b2e15be8bf962d48b6a5b4ae597f56200af99e2c00e7736b48b88c"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e876f0090000000000008000000000000000000000000000000001ad43cb600"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 22:13:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) fcntl$setstatus(r2, 0x4, 0x42800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 22:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) fcntl$setstatus(r2, 0x4, 0x42800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 22:13:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\x00', 0x1, 0x2004c004, 0x0, 0x0) close(r0) 22:13:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/148, 0x94, 0x6b34) 22:13:51 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e36a, 0x0) [ 59.393488][ T23] audit: type=1400 audit(1636236830.995:178): avc: denied { shutdown } for pid=4293 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 22:13:51 executing program 4: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530702000000422c8f8d70e7e20668e5347d86ad6ab8028f10a813faa76c4bfc8fb6eb660b0000f63bbf53fa81d0b76ad9b6aee2ad76cfb7d2117c90a27ab8dc8f2b1b2e70556081af410cef197397a32fe26350b9c52e619c1b97b4783f8feb975bd0606ed8cacd179adb186a6c6b650000000000d123b5d47ee893e0b487fc01cf910ecbc16423fa0b42cf2409c4acca0c3be1dbaba04d9ef83df0177b5eecf48c4a7dad0ed9eddec9325049d140f6931d4ff0df82bdeb1359175a15ae542dde8697c40d1aa930fd98", 0xcb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0xb) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:13:51 executing program 4: unshare(0x20000400) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 22:13:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20}, {0xc}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='4', 0xc0}], 0x1) 22:13:51 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) tkill(r1, 0x6) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000180)=[{}]) 22:13:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/148, 0x94, 0x6b34) 22:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) fcntl$setstatus(r2, 0x4, 0x42800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 22:13:51 executing program 4: unshare(0x20000400) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 22:13:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 22:13:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/148, 0x94, 0x6b34) 22:13:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 22:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) fcntl$setstatus(r2, 0x4, 0x42800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 59.533658][ T4327] netlink: 1288 bytes leftover after parsing attributes in process `syz-executor.3'. 22:13:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/148, 0x94, 0x6b34) 22:13:51 executing program 4: unshare(0x20000400) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 22:13:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x16, 0x0, &(0x7f00001b5000/0x4000)=nil) 22:13:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8994, &(0x7f0000001440)={'sit0\x00', 0x0}) 22:13:51 executing program 2: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/54) sysfs$2(0x2, 0x6, &(0x7f0000000040)=""/102) sysfs$2(0x2, 0x1c00000000000, 0x0) sysfs$2(0x2, 0x1, &(0x7f00000000c0)=""/13) sysfs$2(0x2, 0x3, &(0x7f0000000100)=""/37) sysfs$2(0x2, 0xd3, &(0x7f0000000140)=""/172) sysfs$2(0x2, 0x8, &(0x7f0000000200)=""/43) sysfs$2(0x2, 0x7ff, &(0x7f0000000240)=""/25) sysfs$2(0x2, 0xfffffffffffffffe, &(0x7f0000000280)=""/249) sysfs$2(0x2, 0x7f, &(0x7f0000000380)=""/182) sysfs$2(0x2, 0x4, &(0x7f0000000440)=""/179) sysfs$2(0x2, 0x5, &(0x7f0000000500)=""/4096) sysfs$2(0x2, 0x100000001, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000001580)=""/27) sysfs$2(0x2, 0x0, &(0x7f00000015c0)=""/103) sysfs$2(0x2, 0x9, &(0x7f00000016c0)=""/73) sysfs$2(0x2, 0x6, &(0x7f0000001740)=""/61) sysfs$2(0x2, 0x6, &(0x7f0000001780)=""/149) sysfs$2(0x2, 0x101, &(0x7f0000001840)=""/171) 22:13:51 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close_range(r0, r0, 0x2) readv(r1, 0x0, 0x0) 22:13:51 executing program 4: unshare(0x20000400) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)) 22:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffff, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x38) 22:13:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 22:13:54 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x6000001c}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 22:13:54 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 22:13:54 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept$unix(r0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 22:13:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffef0}, './file0\x00'}) 22:13:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x0, 0x0, 0x4) 22:13:54 executing program 4: setresgid(0xee00, 0xee01, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r3, 0x0) 22:13:54 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r0, 0x0, 0x0) 22:13:54 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xa4}, {0x20}, {0x6, 0x0, 0x0, 0x7fff8001}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 22:13:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x2, &(0x7f00000000c0)=0x80000001, 0x81) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@dev, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x184}}, 0x0) 22:13:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee00) ioctl$KDSETKEYCODE(r0, 0x5608, &(0x7f0000000000)) 22:13:54 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) 22:13:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 22:13:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x1, 0x7fffffffffffffff, 0x4}) 22:13:54 executing program 5: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 22:13:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x800) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r4}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r4, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x0, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @struct={0x435, 0x7}, r4, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x1, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x0, 0x0, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r4, 0x8, 0x1, [0x7f, 0x628f, 0x0, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x0, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x0, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x0, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid=r4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{r1}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000280)={0x0, 0x4, 0x3, 0xbe, {0x6, 0xff, 0x0, 0x6}, [0x3, 0x100000001, 0x99a, 0x9]}}, @subvolid=0xfffffffffffffffe}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0xffffffff, 0x47, 0x5, 0x5, 0x8]}, &(0x7f0000000200)=0x54) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x4, @empty, 0x77b}, 0x1c) 22:13:54 executing program 3: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf) 22:13:54 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 22:13:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x13, r0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0x68d, 0x401, 0x0) [ 62.782955][ C0] scsi_io_completion_action: 17 callbacks suppressed [ 62.782988][ C0] sd 0:0:1:0: tag#3587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 62.798379][ T4414] loop5: detected capacity change from 0 to 512 [ 62.799524][ C0] sd 0:0:1:0: tag#3587 CDB: opcode=0xe5 (vendor) [ 62.812136][ C0] sd 0:0:1:0: tag#3587 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 62.821377][ C0] sd 0:0:1:0: tag#3587 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 22:13:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000909000a008000000000000000000008001e0000000000", 0x24) 22:13:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x800) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000002980)=ANY=[@ANYBLOB="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