, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) 19:33:31 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r0, 0xc4f744c4e6419bb9, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) 19:33:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr\x00') openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) 19:33:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000001580)={{0x4}}, 0x20) 19:33:31 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)={{r0, r1/1000+60000}, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) 19:33:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000001580)={{0x4}}, 0x20) 19:33:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 19:33:32 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x7) 19:33:32 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)={{r0, r1/1000+60000}, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) 19:33:32 executing program 1: setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b3b, &(0x7f00000000c0)={0x0, 0x0}) 19:33:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 19:33:32 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)={{r0, r1/1000+60000}, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) 19:33:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020100ff050000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 19:33:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 19:33:32 executing program 1: setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b3b, &(0x7f00000000c0)={0x0, 0x0}) 19:33:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020100ff050000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 19:33:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 48.974128][ T3485] __nla_validate_parse: 2 callbacks suppressed [ 48.974141][ T3485] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.2'. 19:33:32 executing program 1: setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b3b, &(0x7f00000000c0)={0x0, 0x0}) 19:33:32 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)={{r0, r1/1000+60000}, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) [ 49.041115][ T3479] syz-executor.4 (3479) used greatest stack depth: 10624 bytes left [ 49.053716][ T3494] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.2'. 19:33:32 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x7) 19:33:32 executing program 1: setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b3b, &(0x7f00000000c0)={0x0, 0x0}) 19:33:32 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)={{r0, r1/1000+60000}, {0x77359400}}, 0x100) r2 = syz_mount_image$iso9660(&(0x7f0000000280), 0x0, 0x0, 0x2, &(0x7f0000002740)=[{&(0x7f0000002540)="73e0c1cf4c0040e381a58f834de285b368dbd909cefc0e34d56a28244e069e8cf3c799e017ce38f2065906099b052333b735b49a5f703a9170b7f90d289a4e487e9dcbce637bb3e77f5e0333f8c19365c37e3560833fcbc5f9536024aaa4700e46eefb0b1ebc5887bec0755dfe4292489e1636779ef8fc8ec1bb53ebab43fc3fdc9c5bf86a8c40d18959f0efde758fbc52fc0ccf69eeef5b81a2197b9e09e1fea3f3229ee8a70566d8af3793498d5e5ec5f2d538f54c93813d09a1b4f473d7e3b2", 0xc1, 0x2}, {&(0x7f0000002640)}], 0x2423, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x40) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x700}, 0x0, 0x1ff, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x5, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x9, 0xff, 0x7, 0x0, 0x54b4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10000, 0x5, 0x1b, 0x0, 0x7, 0x2, 0x5, 0x0, 0x1, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x127) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x40, 0x5) write$eventfd(r7, &(0x7f0000000380)=0x10000, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r5, r6, 0x0, 0x4000000000010046) 19:33:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020100ff050000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 19:33:32 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000280), 0x8) 19:33:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@remote, {@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0x3}]}, 0x134}}, 0x0) [ 49.249000][ T3504] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.2'. [ 49.263287][ T22] audit: type=1400 audit(1634844812.842:102): avc: denied { create } for pid=3506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 19:33:32 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000280), 0x8) 19:33:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020100ff050000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 49.290392][ T3508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.304147][ T22] audit: type=1400 audit(1634844812.872:103): avc: denied { write } for pid=3506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.324545][ T22] audit: type=1400 audit(1634844812.872:104): avc: denied { nlmsg_write } for pid=3506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 19:33:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef0100", 0x3c, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {0x0}, {&(0x7f0000012100)="2719c0d901000000803a0900803a09000000000006000000", 0x18, 0xb000}, {0x0}, {&(0x7f0000013b00)="ed41000000100000d3f4655fd3f4655fd3f4655f0000000000000400080000", 0x1f, 0x22080}, {&(0x7f0000013c00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af301000400000000000000000000000200000009000000", 0x40, 0x22100}, {&(0x7f0000013d00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001001000000010000800000000000af30100040000000000000000000000020000000b", 0x3d, 0x22180}, {0x0}], 0x0, &(0x7f0000014900)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) stat(0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) 19:33:32 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000280), 0x8) 19:33:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@remote, {@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0x3}]}, 0x134}}, 0x0) [ 49.347303][ T3514] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.2'. [ 49.364079][ T3516] loop1: detected capacity change from 0 to 545 19:33:32 executing program 3: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="7365633d02"]) [ 49.412328][ T3516] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.417201][ T3521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.423377][ T22] audit: type=1400 audit(1634844813.002:105): avc: denied { mount } for pid=3515 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.496284][ T22] audit: type=1400 audit(1634844813.072:106): avc: denied { unmount } for pid=500 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 19:33:33 executing program 3: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="7365633d02"]) 19:33:33 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000280), 0x8) 19:33:33 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 19:33:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@remote, {@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0x3}]}, 0x134}}, 0x0) 19:33:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4200, r2, 0x2000000000000009, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffd, &(0x7f0000000cc0)="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") ptrace$cont(0x18, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1, &(0x7f0000000b80)=[{&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000b00)=""/77, 0x4d}], 0x9, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) [ 49.642458][ T3534] loop1: detected capacity change from 0 to 224 [ 49.649172][ T3537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.666398][ T22] audit: type=1400 audit(1634844813.242:107): avc: denied { read } for pid=3538 comm="syz-executor.5" name="sg0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.666848][ C1] sd 0:0:1:0: tag#5961 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 49.690326][ T22] audit: type=1400 audit(1634844813.242:108): avc: denied { open } for pid=3538 comm="syz-executor.5" path="/dev/sg0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.700152][ C1] sd 0:0:1:0: tag#5961 CDB: opcode=0xe5 (vendor) 19:33:33 executing program 3: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="7365633d02"]) [ 49.724356][ T22] audit: type=1400 audit(1634844813.242:109): avc: denied { ioctl } for pid=3538 comm="syz-executor.5" path="/dev/sg0" dev="devtmpfs" ino=112 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.730687][ C1] sd 0:0:1:0: tag#5961 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 49.765330][ C1] sd 0:0:1:0: tag#5961 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 49.774403][ C1] sd 0:0:1:0: tag#5961 CDB[20]: ba 19:33:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@remote, {@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0x3}]}, 0x134}}, 0x0) 19:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff8f}) 19:33:33 executing program 3: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="7365633d02"]) [ 49.782944][ T22] audit: type=1326 audit(1634844813.362:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3538 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x0 [ 49.830626][ T3547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:33:33 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 19:33:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) [ 49.844923][ T3549] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff8f}) 19:33:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4200, r2, 0x2000000000000009, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffd, &(0x7f0000000cc0)="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") ptrace$cont(0x18, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1, &(0x7f0000000b80)=[{&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000b00)=""/77, 0x4d}], 0x9, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) [ 49.914411][ T3557] loop3: detected capacity change from 0 to 224 [ 49.934202][ C1] sd 0:0:1:0: tag#5963 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 49.935915][ T3564] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.944095][ C1] sd 0:0:1:0: tag#5963 CDB: opcode=0xe5 (vendor) 19:33:33 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) [ 49.944114][ C1] sd 0:0:1:0: tag#5963 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 49.960361][ T3563] loop1: detected capacity change from 0 to 224 [ 49.969394][ C1] sd 0:0:1:0: tag#5963 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 49.984655][ C1] sd 0:0:1:0: tag#5963 CDB[20]: ba 19:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff8f}) 19:33:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff8f}) [ 50.054882][ T3574] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.085664][ T3578] loop1: detected capacity change from 0 to 224 19:33:33 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 19:33:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4200, r2, 0x2000000000000009, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffd, &(0x7f0000000cc0)="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") ptrace$cont(0x18, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1, &(0x7f0000000b80)=[{&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000b00)=""/77, 0x4d}], 0x9, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) [ 50.103439][ T3580] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.130910][ C1] sd 0:0:1:0: tag#5967 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 50.140772][ C1] sd 0:0:1:0: tag#5967 CDB: opcode=0xe5 (vendor) 19:33:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="b8010000270000022dbd7000fcdbdf259f0187800fdfa704e6b063ec1a2e6642535253c7af179ae8d8f4b4bc505ad79f2c7a60c4baba6025a2793d0f0361709f20d76e87eb05454f733c7bfd1c78a73cb61a5f41d8ebcd63c4995a57920c5cb95266d2d1a2e8d895d19a67db3727017883a134bc0104df44fdf444bc94fc593d4ac6bca175c20a34c58342716603144548c0a3423695143a43d6dbfac9f5baea428c4a84f06534f15a09000000763a362eb30617b4bda2506e746d35dc87a3d95c9b09df77e1f98319e221e3003ff07f3c144b25ba638cb6927df00d69b7b2e7ae5bb4e3f52fdee136a470bfe543585df3cb576541cfa522ed471b42166d9cd99a8674c679dff6eeae9df75c9f7a3864f722be2f9256725b8af65acdcc9968a2833f6b2b7ac80dbb0df0c8e8d2c107ac6c1baef2e523f03496a636f33d8f05be520f489984361794e7096554b3de3f5b6f72e66497b62c396807d77b013db0097c65bd8f642c498b0b5e04911720729b7eb1d8dbf8e7cf1806ea3c74461619c259744cb4f8631572f6ae5febe28fb115e49d606caf229d6e92d078574b5fbc70aa1579462d46013e6b19931009649fddd94dae75626af624039dd70a160007007100282c0000cee863b2d74b7f89fd940984872049986e5aea5a449aa3bd874e40deb2bb153162bdc482bd23c86d43c9eae475547c089374cd67e425e9d2bf08ba001e207abc8aa621c0690b826598fd850185fb64ece3d07fc3034c33568fff9d1ca2238e14305751fb79e827d29484bfcc86fa5402cff597b0206a0c3873efe1fc7e96272a652a1fffe0741c15a1b4b3b85d9ed6bc0c9de623d0352f33503a5bb0ab15fb62d30e8266978b12fdaea7aff855ff927127131c5c8722e164509245239945688a3062b95b406c6cc009f7a2d305f5c70b7030b388958318d5e60b5f9a4c258b852d9e06e69396490992", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:33:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000c00000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000300)={[{@unhide}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 50.140800][ C1] sd 0:0:1:0: tag#5967 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 50.140816][ C1] sd 0:0:1:0: tag#5967 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 50.140833][ C1] sd 0:0:1:0: tag#5967 CDB[20]: ba [ 50.161428][ T3588] loop3: detected capacity change from 0 to 224 19:33:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) wait4(0x0, 0x0, 0x4000000a, 0x0) ptrace$setopts(0x4200, r2, 0x2000000000000009, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffd, &(0x7f0000000cc0)="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") ptrace$cont(0x18, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/158, 0x9e}], 0x1, &(0x7f0000000b80)=[{&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f0000000b00)=""/77, 0x4d}], 0x9, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) [ 50.272410][ T3601] loop1: detected capacity change from 0 to 224 [ 50.278273][ T3604] loop3: detected capacity change from 0 to 224 [ 50.281090][ C1] sd 0:0:1:0: tag#5968 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 50.294748][ C1] sd 0:0:1:0: tag#5968 CDB: opcode=0xe5 (vendor) [ 50.301106][ C1] sd 0:0:1:0: tag#5968 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 50.310149][ C1] sd 0:0:1:0: tag#5968 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 19:33:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="b8010000270000022dbd7000fcdbdf259f0187800fdfa704e6b063ec1a2e6642535253c7af179ae8d8f4b4bc505ad79f2c7a60c4baba6025a2793d0f0361709f20d76e87eb05454f733c7bfd1c78a73cb61a5f41d8ebcd63c4995a57920c5cb95266d2d1a2e8d895d19a67db3727017883a134bc0104df44fdf444bc94fc593d4ac6bca175c20a34c58342716603144548c0a3423695143a43d6dbfac9f5baea428c4a84f06534f15a09000000763a362eb30617b4bda2506e746d35dc87a3d95c9b09df77e1f98319e221e3003ff07f3c144b25ba638cb6927df00d69b7b2e7ae5bb4e3f52fdee136a470bfe543585df3cb576541cfa522ed471b42166d9cd99a8674c679dff6eeae9df75c9f7a3864f722be2f9256725b8af65acdcc9968a2833f6b2b7ac80dbb0df0c8e8d2c107ac6c1baef2e523f03496a636f33d8f05be520f489984361794e7096554b3de3f5b6f72e66497b62c396807d77b013db0097c65bd8f642c498b0b5e04911720729b7eb1d8dbf8e7cf1806ea3c74461619c259744cb4f8631572f6ae5febe28fb115e49d606caf229d6e92d078574b5fbc70aa1579462d46013e6b19931009649fddd94dae75626af624039dd70a160007007100282c0000cee863b2d74b7f89fd940984872049986e5aea5a449aa3bd874e40deb2bb153162bdc482bd23c86d43c9eae475547c089374cd67e425e9d2bf08ba001e207abc8aa621c0690b826598fd850185fb64ece3d07fc3034c33568fff9d1ca2238e14305751fb79e827d29484bfcc86fa5402cff597b0206a0c3873efe1fc7e96272a652a1fffe0741c15a1b4b3b85d9ed6bc0c9de623d0352f33503a5bb0ab15fb62d30e8266978b12fdaea7aff855ff927127131c5c8722e164509245239945688a3062b95b406c6cc009f7a2d305f5c70b7030b388958318d5e60b5f9a4c258b852d9e06e69396490992", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="b8010000270000022dbd7000fcdbdf259f0187800fdfa704e6b063ec1a2e6642535253c7af179ae8d8f4b4bc505ad79f2c7a60c4baba6025a2793d0f0361709f20d76e87eb05454f733c7bfd1c78a73cb61a5f41d8ebcd63c4995a57920c5cb95266d2d1a2e8d895d19a67db3727017883a134bc0104df44fdf444bc94fc593d4ac6bca175c20a34c58342716603144548c0a3423695143a43d6dbfac9f5baea428c4a84f06534f15a09000000763a362eb30617b4bda2506e746d35dc87a3d95c9b09df77e1f98319e221e3003ff07f3c144b25ba638cb6927df00d69b7b2e7ae5bb4e3f52fdee136a470bfe543585df3cb576541cfa522ed471b42166d9cd99a8674c679dff6eeae9df75c9f7a3864f722be2f9256725b8af65acdcc9968a2833f6b2b7ac80dbb0df0c8e8d2c107ac6c1baef2e523f03496a636f33d8f05be520f489984361794e7096554b3de3f5b6f72e66497b62c396807d77b013db0097c65bd8f642c498b0b5e04911720729b7eb1d8dbf8e7cf1806ea3c74461619c259744cb4f8631572f6ae5febe28fb115e49d606caf229d6e92d078574b5fbc70aa1579462d46013e6b19931009649fddd94dae75626af624039dd70a160007007100282c0000cee863b2d74b7f89fd940984872049986e5aea5a449aa3bd874e40deb2bb153162bdc482bd23c86d43c9eae475547c089374cd67e425e9d2bf08ba001e207abc8aa621c0690b826598fd850185fb64ece3d07fc3034c33568fff9d1ca2238e14305751fb79e827d29484bfcc86fa5402cff597b0206a0c3873efe1fc7e96272a652a1fffe0741c15a1b4b3b85d9ed6bc0c9de623d0352f33503a5bb0ab15fb62d30e8266978b12fdaea7aff855ff927127131c5c8722e164509245239945688a3062b95b406c6cc009f7a2d305f5c70b7030b388958318d5e60b5f9a4c258b852d9e06e69396490992", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) [ 50.310168][ C1] sd 0:0:1:0: tag#5968 CDB[20]: ba 19:33:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:33:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f000000000000020000000000000000100300000002", 0x29, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}], 0x0, &(0x7f0000000440)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 19:33:34 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 19:33:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) [ 50.480095][ T3628] loop3: detected capacity change from 0 to 512 19:33:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x5, 0x10001}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB="b8010000270000022dbd7000fcdbdf259f0187800fdfa704e6b063ec1a2e6642535253c7af179ae8d8f4b4bc505ad79f2c7a60c4baba6025a2793d0f0361709f20d76e87eb05454f733c7bfd1c78a73cb61a5f41d8ebcd63c4995a57920c5cb95266d2d1a2e8d895d19a67db3727017883a134bc0104df44fdf444bc94fc593d4ac6bca175c20a34c58342716603144548c0a3423695143a43d6dbfac9f5baea428c4a84f06534f15a09000000763a362eb30617b4bda2506e746d35dc87a3d95c9b09df77e1f98319e221e3003ff07f3c144b25ba638cb6927df00d69b7b2e7ae5bb4e3f52fdee136a470bfe543585df3cb576541cfa522ed471b42166d9cd99a8674c679dff6eeae9df75c9f7a3864f722be2f9256725b8af65acdcc9968a2833f6b2b7ac80dbb0df0c8e8d2c107ac6c1baef2e523f03496a636f33d8f05be520f489984361794e7096554b3de3f5b6f72e66497b62c396807d77b013db0097c65bd8f642c498b0b5e04911720729b7eb1d8dbf8e7cf1806ea3c74461619c259744cb4f8631572f6ae5febe28fb115e49d606caf229d6e92d078574b5fbc70aa1579462d46013e6b19931009649fddd94dae75626af624039dd70a160007007100282c0000cee863b2d74b7f89fd940984872049986e5aea5a449aa3bd874e40deb2bb153162bdc482bd23c86d43c9eae475547c089374cd67e425e9d2bf08ba001e207abc8aa621c0690b826598fd850185fb64ece3d07fc3034c33568fff9d1ca2238e14305751fb79e827d29484bfcc86fa5402cff597b0206a0c3873efe1fc7e96272a652a1fffe0741c15a1b4b3b85d9ed6bc0c9de623d0352f33503a5bb0ab15fb62d30e8266978b12fdaea7aff855ff927127131c5c8722e164509245239945688a3062b95b406c6cc009f7a2d305f5c70b7030b388958318d5e60b5f9a4c258b852d9e06e69396490992", @ANYRES64], 0x1b8}, {0x0}], 0x2}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff7ffffffffffff9}, 0x110, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x24000890) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4000080) 19:33:34 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 19:33:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)=0xfdfdffff) 19:33:34 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 19:33:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 50.534300][ T3628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.565497][ T3628] EXT4-fs error (device loop3): __ext4_iget:4792: inode #12: block 2: comm syz-executor.3: invalid block [ 50.577653][ T3646] loop4: detected capacity change from 0 to 264192 19:33:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f000000000000020000000000000000100300000002", 0x29, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}], 0x0, &(0x7f0000000440)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 19:33:34 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 19:33:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)=0xfdfdffff) 19:33:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x0, 0xfffffffe}, {0x44}, {0x6}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 19:33:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0x24008040) 19:33:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0x24008040) [ 50.734828][ T3671] loop3: detected capacity change from 0 to 512 [ 50.744341][ T3674] loop4: detected capacity change from 0 to 264192 19:33:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)=0xfdfdffff) 19:33:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 50.796627][ T3671] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.821338][ T3671] EXT4-fs error (device loop3): __ext4_iget:4792: inode #12: block 2: comm syz-executor.3: invalid block 19:33:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:33:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f000000000000020000000000000000100300000002", 0x29, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}], 0x0, &(0x7f0000000440)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 19:33:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0x24008040) 19:33:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x7c, 0x22, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0x6a, 0x0, 0x0, 0x0, @str=')\xdeh\x96\xa5K\x87\x80,\f\'\v\xb9I\xde\xa2&\v\xaf\xb6\xb4\xb2)\xcaL4(\f\xaah\xc8PEd\nl\xe5\xa2\f\x1c\xda\xf9s@l\xfc\x94\x8d\x86\xb5\x1bi\xd2\xce\xad\v\xb2\xfe*\xd7f\x8d\x98\xc1\xa8T\xc2\xdb\xc6\xd35\xce\x17;\x95\x0f6\x853\xbc,\x1f\xa0\xcdh\x1b \tW\xe4\xf5y\xe0L\xbb\x13[\x9d\x1a7\x94\xcc'}]}, 0x7c}], 0x1}, 0x0) [ 50.858646][ T3685] loop4: detected capacity change from 0 to 264192 [ 50.945633][ T3697] loop3: detected capacity change from 0 to 512 [ 50.957721][ T3697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.969844][ T3697] EXT4-fs error (device loop3): __ext4_iget:4792: inode #12: block 2: comm syz-executor.3: invalid block 19:33:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x0, 0xfffffffe}, {0x44}, {0x6}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 19:33:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)=0xfdfdffff) 19:33:35 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0x24008040) 19:33:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x7c, 0x22, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0x6a, 0x0, 0x0, 0x0, @str=')\xdeh\x96\xa5K\x87\x80,\f\'\v\xb9I\xde\xa2&\v\xaf\xb6\xb4\xb2)\xcaL4(\f\xaah\xc8PEd\nl\xe5\xa2\f\x1c\xda\xf9s@l\xfc\x94\x8d\x86\xb5\x1bi\xd2\xce\xad\v\xb2\xfe*\xd7f\x8d\x98\xc1\xa8T\xc2\xdb\xc6\xd35\xce\x17;\x95\x0f6\x853\xbc,\x1f\xa0\xcdh\x1b \tW\xe4\xf5y\xe0L\xbb\x13[\x9d\x1a7\x94\xcc'}]}, 0x7c}], 0x1}, 0x0) 19:33:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f000000000000020000000000000000100300000002", 0x29, 0x5600}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}], 0x0, &(0x7f0000000440)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 19:33:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 51.536987][ T22] kauditd_printk_skb: 13 callbacks suppressed [ 51.536998][ T22] audit: type=1326 audit(1634844815.112:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa232133a39 code=0x0 [ 51.607877][ T3705] loop3: detected capacity change from 0 to 512 [ 51.616215][ T3708] loop4: detected capacity change from 0 to 264192 19:33:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x7c, 0x22, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0x6a, 0x0, 0x0, 0x0, @str=')\xdeh\x96\xa5K\x87\x80,\f\'\v\xb9I\xde\xa2&\v\xaf\xb6\xb4\xb2)\xcaL4(\f\xaah\xc8PEd\nl\xe5\xa2\f\x1c\xda\xf9s@l\xfc\x94\x8d\x86\xb5\x1bi\xd2\xce\xad\v\xb2\xfe*\xd7f\x8d\x98\xc1\xa8T\xc2\xdb\xc6\xd35\xce\x17;\x95\x0f6\x853\xbc,\x1f\xa0\xcdh\x1b \tW\xe4\xf5y\xe0L\xbb\x13[\x9d\x1a7\x94\xcc'}]}, 0x7c}], 0x1}, 0x0) [ 51.635682][ T22] audit: type=1326 audit(1634844815.212:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa232133a39 code=0x0 19:33:35 executing program 0: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x180) getdents64(r1, &(0x7f0000000300)=""/187, 0xbb) 19:33:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x7c, 0x22, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0x6a, 0x0, 0x0, 0x0, @str=')\xdeh\x96\xa5K\x87\x80,\f\'\v\xb9I\xde\xa2&\v\xaf\xb6\xb4\xb2)\xcaL4(\f\xaah\xc8PEd\nl\xe5\xa2\f\x1c\xda\xf9s@l\xfc\x94\x8d\x86\xb5\x1bi\xd2\xce\xad\v\xb2\xfe*\xd7f\x8d\x98\xc1\xa8T\xc2\xdb\xc6\xd35\xce\x17;\x95\x0f6\x853\xbc,\x1f\xa0\xcdh\x1b \tW\xe4\xf5y\xe0L\xbb\x13[\x9d\x1a7\x94\xcc'}]}, 0x7c}], 0x1}, 0x0) 19:33:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) [ 51.683940][ T3705] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.703005][ T3705] EXT4-fs error (device loop3): __ext4_iget:4792: inode #12: block 2: comm syz-executor.3: invalid block 19:33:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) [ 51.743954][ T3720] loop0: detected capacity change from 0 to 264192 [ 51.764777][ T22] audit: type=1400 audit(1634844815.342:126): avc: denied { create } for pid=3721 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 19:33:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) [ 51.784728][ T22] audit: type=1400 audit(1634844815.342:127): avc: denied { ioctl } for pid=3721 comm="syz-executor.5" path="socket:[13524]" dev="sockfs" ino=13524 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.824257][ T3724] loop4: detected capacity change from 0 to 262160 [ 51.838983][ T3720] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 51.916770][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:33:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x0, 0xfffffffe}, {0x44}, {0x6}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 19:33:36 executing program 3: setresuid(0xee01, 0xee01, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 19:33:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) 19:33:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) socket(0x200000100000011, 0x3, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 19:33:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 19:33:36 executing program 0: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x180) getdents64(r1, &(0x7f0000000300)=""/187, 0xbb) 19:33:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) 19:33:36 executing program 3: setresuid(0xee01, 0xee01, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) [ 52.489226][ T3736] loop4: detected capacity change from 0 to 262160 [ 52.499085][ T22] audit: type=1400 audit(1634844816.082:128): avc: denied { setopt } for pid=3733 comm="syz-executor.1" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.509535][ T3740] loop0: detected capacity change from 0 to 264192 19:33:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 19:33:36 executing program 3: setresuid(0xee01, 0xee01, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 19:33:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) [ 52.556267][ T22] audit: type=1326 audit(1634844816.112:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa232133a39 code=0x0 [ 52.589584][ T3740] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:33:36 executing program 3: setresuid(0xee01, 0xee01, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) [ 52.625810][ T3753] loop5: detected capacity change from 0 to 262160 [ 52.677664][ T3757] loop4: detected capacity change from 0 to 262160 19:33:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x0, 0xfffffffe}, {0x44}, {0x6}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 19:33:36 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) socket(0x200000100000011, 0x3, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 19:33:36 executing program 0: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x180) getdents64(r1, &(0x7f0000000300)=""/187, 0xbb) 19:33:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 19:33:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) [ 53.389056][ T22] audit: type=1400 audit(1634844816.972:130): avc: denied { getopt } for pid=3758 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.412213][ T3764] loop0: detected capacity change from 0 to 264192 [ 53.415670][ T3761] loop5: detected capacity change from 0 to 262160 19:33:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) socket(0x200000100000011, 0x3, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 19:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) [ 53.419554][ T22] audit: type=1326 audit(1634844816.992:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa232133a39 code=0x0 [ 53.433213][ T3770] loop4: detected capacity change from 0 to 262160 [ 53.461965][ T3764] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:33:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) preadv(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 19:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:37 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:37 executing program 0: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x180) getdents64(r1, &(0x7f0000000300)=""/187, 0xbb) [ 53.562600][ T57] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 53.586954][ T3779] loop5: detected capacity change from 0 to 262160 [ 53.638420][ T3783] loop0: detected capacity change from 0 to 264192 [ 53.648512][ T3783] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 53.699114][ T57] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x36, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 19:33:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) socket(0x200000100000011, 0x3, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 19:33:37 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x100) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 19:33:37 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0xafe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x5452, &(0x7f00000000c0)={'wlan1\x00'}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x64, 0xa0, 0x0, 0x4, 0x0, 0x8000, 0x10200, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0xbdd, 0x9, 0x7, 0x8000, 0x7, 0x7e, 0x0, 0x2, 0x0, 0x8817}, 0x0, 0xb, r0, 0xa) 19:33:37 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) fchmod(r0, 0x0) 19:33:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x100) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 19:33:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 19:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x36, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 19:33:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e29, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000030000000000000000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x0) 19:33:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x100) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 19:33:37 executing program 1: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r0, 0x1) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 19:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x36, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 54.315609][ T22] audit: type=1400 audit(1634844817.892:132): avc: denied { read } for pid=3800 comm="syz-executor.3" name="rtc0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 19:33:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 19:33:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x100000000, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 19:33:38 executing program 5: r0 = socket$inet(0x2, 0x3, 0x100) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 19:33:38 executing program 1: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r0, 0x1) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 19:33:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e29, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000030000000000000000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x0) [ 54.397491][ T22] audit: type=1400 audit(1634844817.922:133): avc: denied { open } for pid=3800 comm="syz-executor.3" path="/dev/rtc0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 19:33:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x4d}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x36, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 19:33:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e29, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000030000000000000000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x0) 19:33:38 executing program 1: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r0, 0x1) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 19:33:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 19:33:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x4d}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x100000000, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 19:33:38 executing program 0: r0 = open(0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) 19:33:38 executing program 1: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r0, 0x1) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 19:33:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x4d}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 19:33:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000140)={0xa, 0x4e29, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000030000000000000000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x0) [ 54.573393][ C1] sd 0:0:1:0: tag#5976 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 54.583251][ C1] sd 0:0:1:0: tag#5976 CDB: opcode=0xe5 (vendor) [ 54.589604][ C1] sd 0:0:1:0: tag#5976 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 54.598676][ C1] sd 0:0:1:0: tag#5976 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 54.607723][ C1] sd 0:0:1:0: tag#5976 CDB[20]: ba 19:33:38 executing program 2: r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0xf0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0xf0}}, 0x0) 19:33:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x4d}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 54.627578][ C0] sd 0:0:1:0: tag#5977 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 54.637402][ C0] sd 0:0:1:0: tag#5977 CDB: opcode=0xe5 (vendor) [ 54.643763][ C0] sd 0:0:1:0: tag#5977 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 54.652821][ C0] sd 0:0:1:0: tag#5977 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 54.661858][ C0] sd 0:0:1:0: tag#5977 CDB[20]: ba 19:33:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x100000000, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 19:33:38 executing program 0: syz_io_uring_setup(0x4cef, &(0x7f0000000080)={0x0, 0x0, 0x37}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 19:33:38 executing program 2: r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0xf0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0xf0}}, 0x0) 19:33:38 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:38 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 19:33:38 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:38 executing program 0: syz_io_uring_setup(0x4cef, &(0x7f0000000080)={0x0, 0x0, 0x37}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 19:33:38 executing program 2: r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0xf0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0xf0}}, 0x0) 19:33:38 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 19:33:38 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:39 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 19:33:39 executing program 0: syz_io_uring_setup(0x4cef, &(0x7f0000000080)={0x0, 0x0, 0x37}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 19:33:39 executing program 2: r0 = socket(0x10, 0x2, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0xf0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0xf0}}, 0x0) 19:33:39 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x100000000, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 19:33:39 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 19:33:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:39 executing program 0: syz_io_uring_setup(0x4cef, &(0x7f0000000080)={0x0, 0x0, 0x37}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 19:33:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) [ 56.647493][ C0] sched: RT throttling activated 19:33:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:41 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:41 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:41 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:43 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:43 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:43 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4}, 0x1) io_uring_enter(r0, 0x1dea, 0x0, 0x0, 0x0, 0x0) 19:33:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) gettid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5, 0x18, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(0x0, 0x0, 0xa, r3, 0x0) unshare(0x40000000) 19:33:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) 19:33:47 executing program 1: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 19:33:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 19:33:47 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sN@Jl@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(\x18\x01\x00\x006BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x00'/401, 0x5) ftruncate(r0, 0x1000000) pread64(r0, &(0x7f0000000a00)=""/164, 0xfffffeb7, 0x0) 19:33:47 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 19:33:47 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:33:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 19:33:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 19:33:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) [ 64.250976][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 64.250987][ T22] audit: type=1400 audit(1634844827.832:137): avc: denied { cpu } for pid=3998 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 19:33:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 19:33:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffc, &(0x7f0000000280)=@chain) 19:33:47 executing program 1: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:47 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:33:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffc, &(0x7f0000000280)=@chain) 19:33:48 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:48 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sN@Jl@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(\x18\x01\x00\x006BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x00'/401, 0x5) ftruncate(r0, 0x1000000) pread64(r0, &(0x7f0000000a00)=""/164, 0xfffffeb7, 0x0) 19:33:48 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:33:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffc, &(0x7f0000000280)=@chain) 19:33:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 19:33:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffc, &(0x7f0000000280)=@chain) 19:33:48 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:48 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:33:48 executing program 1: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:48 executing program 3: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000140)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, r0) 19:33:48 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sN@Jl@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(\x18\x01\x00\x006BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x00'/401, 0x5) ftruncate(r0, 0x1000000) pread64(r0, &(0x7f0000000a00)=""/164, 0xfffffeb7, 0x0) 19:33:48 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000140)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, r0) 19:33:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000140)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, r0) 19:33:48 executing program 3: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:48 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000140)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, r0) 19:33:48 executing program 1: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:48 executing program 3: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@empty}, {@in6=@private0, 0x0, 0x6c}, @in6=@loopback}, 0x0, 0x100}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 19:33:48 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sN@Jl@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(\x18\x01\x00\x006BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x00'/401, 0x5) ftruncate(r0, 0x1000000) pread64(r0, &(0x7f0000000a00)=""/164, 0xfffffeb7, 0x0) 19:33:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd0000040d001000ea1100000005000000", 0x29}], 0x1) 19:33:48 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) 19:33:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd0000040d001000ea1100000005000000", 0x29}], 0x1) [ 64.934176][ T4080] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 64.950928][ T22] audit: type=1400 audit(1634844828.532:138): avc: denied { read } for pid=361 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 19:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0xc}, {0x64}, {0x6, 0x0, 0x0, 0x7ffffdbc}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 19:33:48 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85320, &(0x7f0000000200)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)) [ 64.986752][ T4085] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 19:33:48 executing program 3: syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='acl,fsc=r']) 19:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0xc}, {0x64}, {0x6, 0x0, 0x0, 0x7ffffdbc}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 19:33:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd0000040d001000ea1100000005000000", 0x29}], 0x1) 19:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0xc}, {0x64}, {0x6, 0x0, 0x0, 0x7ffffdbc}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 19:33:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 19:33:48 executing program 4: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) 19:33:48 executing program 3: syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='acl,fsc=r']) [ 65.090107][ T4098] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 19:33:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0xc}, {0x64}, {0x6, 0x0, 0x0, 0x7ffffdbc}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 19:33:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd0000040d001000ea1100000005000000", 0x29}], 0x1) 19:33:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 19:33:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002480)=[{&(0x7f0000000440)="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", 0xff4}], 0x1) 19:33:48 executing program 3: syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='acl,fsc=r']) 19:33:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}}, 0x0) [ 65.198994][ T4112] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 19:33:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 19:33:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19:33:48 executing program 2: open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x80283, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 19:33:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 19:33:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002480)=[{&(0x7f0000000440)="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", 0xff4}], 0x1) 19:33:48 executing program 3: syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='acl,fsc=r']) [ 65.266345][ T4121] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffffffffffff8) dup2(r0, r1) 19:33:48 executing program 2: open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x80283, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 19:33:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19:33:48 executing program 2: open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x80283, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 19:33:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 65.353344][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}}, 0x0) 19:33:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002480)=[{&(0x7f0000000440)="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", 0xff4}], 0x1) 19:33:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffffffffffff8) dup2(r0, r1) 19:33:49 executing program 2: open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x80283, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 19:33:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19:33:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 65.445868][ T4152] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}}, 0x0) 19:33:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffffffffffff8) dup2(r0, r1) 19:33:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002480)=[{&(0x7f0000000440)="62a7edfd7d7d1efa47cc16bad0106b80aeb521fffdf87a8c62e377fd8ae3e622ba958f8f89997d0fc1e1c65f8234da897389f721f24b32e09031504881aa3f988f201822c7a2695e50347e78316cd2c9751ea59e239c6cb4dcfa648c1ced20ef569e225e42995a4d94b40ffe69633fd17d0570cdc097ee5bc4b4f15e5dfdfcceb432ec3e19ad07c8b9a87f714ff3af30c36c7901018b071d521632b04e2d96c22bd8db5d53f88a2fe824b183e7c6bdc5fba04a8eb7c277811d38ea40a0e0b4ecd721d6aba43dadbfcb2e1e9f2d1d294739c280b8e43c8744c7c8d9ff3248d764938aedae188abd8e1fa2fda47fb6cefd35fff6256bc2321cda7f7056fea9460984c240eb192e15b3ac3935ed949a7c20beb5b093e18bcd7b288e99f10ce2721417734f49ea827485451bf4f7e036d7af86cbd657212084ddfd008ca699f36648a366c337a6da08c9a4c26adc966c9b564a5f32be618d06d7a1f22e1cd7da5ddba20f95f6aa393b74dcc7e810d4c8f7e32fa08b7d14b72e1fabfa9112a18410bc8eb74bd6e581be14141048234435cbef9209e8acd7ffe09ff05348a895794d207d5913cfc6fcb7b3eb3dd0f45adb12df490b16b426148ab4288709bbc3c12a55463dd069273bc5475b7c6be82916d5c5ae692148b1dbef68dc60ad70156fd972f515ce96ed71da80f146f9f9068e1ef3d5127eb7e348b3608ff904672c5cf084884914c702abbb53779a528bcc3cbebfd402880d03a3312761a9664dc2d95225ddea6e9d7f37f8ab333c8d1430d08afcdd4ba37afe748b55797a7ca3dc46144bc797d4ea8301fd220edea2a3e12456cae89af8d36e7207a77e6c509aa3a589fefd385db03c7f874da4b7acfe2d425b0c90c30e93ef25c59e5753c473f4baeab279bf30141691c7f000715a14477b0e844686d83d2217624e466459c9ce83ce5b0faa2bb04e415d30d46fcc7a146843c33f23f8376b33b194ad4fcaece17acb687e6b6a594e80611e693886721f0392a85ab60b900015968afb4cdac9e625e589f89ba73af6b8a3a9115cd1fd64c5a09dde6f17d022f48f2c9624f747269c504acbb170d2af6e779b84417cec2eea22eb25d2d7cc8a7a2cd88b61dbf26c802995e1aaad2c4ab162fc568049946beb208be75ea353da067bbf740c3cc05d08341e86caf9bc05bb02abf8771ffc5aab434a4abebc3facb51ed7a17e34a14d282eda8c298612018326b4e0b459e53520c647b4aecc3e3c0afbb0dc3da8b9e19f56737fe00df81663ab0bb94c4aa5a9cb6a717d4f1651349b6fc5f18c18f308adc4b1ea09bd7e182ae10610b040ef366ad918ba42698d3d5518fe22028ca3547143e5d3d41aa271a7a78d5b96609eb4d95efb0909e97e107d9f0d19fb4a27f62fc0215fa68df112be29ab9b44701ffeb1157792e1477f39d75894fc5a046776b2e61df6f23edecdd9a77b6a66185123397c9956e26596e63a23a0238efd40ad583f6829f63bfe0750c18854f74a04094146d7ff02f35e083a193f5d03f05f04455e15a1b6f590c4b5876d066d05434f7cfc0a310581dc05b81c92a4fcde4c584a2fcb935f86bfeb67089571f40900de0be802dc143689b532ab885d47011cbe8745a332234b4b7634b52eed6a52d9896b9c34be235a0b6da1b8248536f026ebbe163108513a995331bd7da3932ff9185e77ad4be3dc2cf120d15f73604be495c068d75117f2a60cc5a3bcb5cf00bae6b07ed4a9e16809c83745ffe0200954589f8bd7ba391dff10d76da07e730f91a304b306a738e4af09740c700ff40e3ea2cc0d2521be9195c196072c04c8d419cfba752541ee2aaa117e6d55ca3453facceea1fa05c03bb41648588dd9aa001c443f019a1f35873c149edbbcd42fc0302aefca3e72a73dea17abe32b9c2e005424a5e23c85b887178453e21d91fdb42cdf9fc7c8bba1d8314b7d54a0d420e80c367a36559e6b2b1039183f94f64ce7768107a1c9ad8a41813a172f0208a7dc6d07df132c02d5762652f1f32a3a292bafe1be8922feb7df5fc7704cb09ba5334ad22f0861f0c491e64f71095ffcd7357c21463904d6d2f5ddb017d4b213cd4581045b071d851d562fb007767ffa5d88e1593d23feb4b7da7e6c7342ff4c2ac5b31fc3100827d08b519b7f9c5e2d9667173f67b69e0f65b6fcdaea7b1d2150e444a87ce5c7688b4bceebda952a2e906c298a13a048fa5b919b51b90bc9eb2bd207d42aeaab03ef3f4b31b655728823d2f74c04616040ad2699fa3e497600454ebfe13f665c1fb92676c17040e085a09677060ac2d92fc39754f02ccf4c84aa4fd8665c381daa2137be6b6e1d772fd261966576e3604bda6a3360faa0938b4051f1b7c7dfa0cba1e949bb54578c05f806e0b266f4b4e3f7653adbd95ffa97406d7a2cdec8ba288094e418e303f1ad7af18b9501fb9cc076837c4e57077a5306d71488094816190d5baa105ba032fa15e9040949ff3a40d168cc63663563e94c36114df571e1210ec2481f2597c8353c51b17236f5185a616ade8358fd3ff25d907f76b7140281eb92a81dac49ee7d6d347904115336df5b3157948e964af92f4a52d909e74a2a626459d396b8ebe9f57f2ba75f02a4e421ee4f239e56d4e698b575fc000a0898255d2f0e07ae596b0f84f08cee65881ab04fe80dc99c44a959b966327c2f03c8596da8d25e829980d7a41bc707563edee6d54e07c4fcf6212feea5d666110396d2177ed13bb775c24b717be081055147088b00f59e7ff3bb064d2a8694a2796d6a0eea8ebdf7f0f84c6d4c19f3a6845c00b2df616c84d71296872806cc579a07ec87bc958debfec73b7c591c29d3f6a05a8e96c2405da8dad682f1e31c760210b6f7bbbe5790708d14fc18d0d6187098016e8ab86cd5336d688623e07b98e5ddeb47b94f8cb7fa1628dab2c6afbbebd477c942c0f25f5dbbc3ee38d50c2fd853368ae25f0a0d91a88210a48ffc079b0105e0d0cd15950516aea89eeeb76829756f7289cfbffc846a4db0f5dcb29f196e4f2137198a24cfa950532d6d71b6cd13667f3ac2a3f3cbd515834479d3c5295f5af5bf62dd276dc453df7845b1b35a2d1e3207045c37841af3263ba937c751b0bc6c12bc1bb2b8ba110b52bb46de250b6e7f4d71367e0594517e5435486ed23d04beff175d097b9a4724d3a9521151a693bf1e4e7fe4b3a9732cec9fea2da274711fe8b73521773f182d3320fbc99e9789a449eb1acc63a1e0b73557d8d159f975f1d2951d5128b0fa8f28f6989141f12ce6876dbb5d83ae5ff41c25db17595c6168961157070b00ee3c62bc0fc5d4f83022da9e60255973a5c8f782d44770a9bc03ed48946df7dddf945e9a01de29aac44e00f565ddcb41685f1bd5e4d0c38adf4df6e2cdffefe1fbcd26acf1b4210500f83fe36378a23cdec9583fc1a8962845bd13c859eeedfa20675d4e611df08cc3b4c8561bc91163447f86d84855987b1c6d55a55b311d1dd069233cb44060770dec7b196a751dc73f02974120cff9d55b568d160d7a285f4eb8b1d1654c372babad905e99f78a533f63ebdbff90f0377ce2c6e34a7605e398190252b0edc3758beff1246eaae4c3b0930db5264d11a7238a99e86a0d886aee0b3dcafa523ec3086080908c0e49741e47a81c9d1ded41a30c47f3f2936f193588fbe87c751e45e31dfd23fc55ce467d47588b8f05652f86c6e51afc08ff30f696ab14f8d65727a177c244d905fb0bdaf86434b371762a194e066dcb984b34c88c40966dc9aeafd2999d8399c71617bbad93d568dc8998cf43b83142c134662a169f656e99fccdb2271c1ed6ea966f0bc5f75956fc1ef66d9481deec20e0bf0ce36d3e4171cb07eea63d15a2df9c6acec546d5dbceaeb0994505053e391f6d1a6c6f09f8ede25f559518300ad9503de2933284968eac91216a0f6e8607bcde32b8a99d8e5abe0e6983e6231acf91f90ad4c23a1a029e80e19dab0dd62665f5ce024f54934b587f2671fbd06770a1d9e943408638cc8f43810877de9a08a99199f1f0fa2eeec38100c25bc7d7a53de3462127e5161fea8f64cbd433457394e673b06853552e9defd3d0b1ffe75fa9e0e72bed83e551d0cd18740ce09601b6f59a03effdc6f462a310a0bcc2cb4f47ab29e4b21badc6250f1768aaf48aa4c705531d69a39b3cd5b9bba9e118569c35d92e229873acde43b8d1a070b18ccdc876046960f8387fa7e3446e8ae6bbb761491f27b8510f04fcab55e4880a1592c19738f471378afcd3afa8d829697ee175fd3773ab30b28f16281c695e711ef7d371a53fe193a1871b6f45e9c02a38976a015db990f1f226d5db7cbf29425437ed61632d10777a7a79ac6c5db71682f4eda5f766446f238d21b4d6b388094a8fcfef929a14a5d36ff83af1126711d6255be8f585ccf08b1f263f63c7a5a63ddd88d6fc4974d8d3d994767f56ef43de2936447a81668ea166d5c07a6db91c0c6fca98eb25f5e7d52414d92d990499eee076d43d43208c1ab43606b05893ae563a697c3324cd2f91cc0c092d158ca74959eb444daca9f9a8016b5b7fa0c3dd2155cc2c6fda36914a0305e53093e54ab787d9a26e689e136aafaac0314bdb567f07ec2ad65fbd251bbdb3ce44f36822d22ba97c45cccada141395a2f261096b2bb248a014d6d81acaae5dc8503987345bb567df369c99378fc07d8803c6c7ad4b195776e4cbf8d262be2ec381bad4cc22f0a2bb26a903ec45282b12f17162f64fa161081166703d5d06ec7749eee492e29bcdb282c41fab347f0119a50081ed1893038ea09e225b4a492d8fc34aeac075cfd792abbf838eda715a76132b63c669441f0547c9d6fadafae6fc32753d208cae49b3dc2bac2eb4656796e1a5789fa198720fc62d3d4f7bde3636c80b206b53941eb09e5b0ae44e7b5c71d40148d11bde405ff5b500fe2746f03f2c319fab3dcb35b4585d5e1ce21ad01e593d747b4b6d7d74a65d666508cc52bb60ed0ea6a5c6b2150f887b6bec41cccb37eee8f3c69a31fd9aaf6f6616e9cc504bd47a6008608c76c3ad4a84f90e672e68c1eb1301242b6c499695d1b736a4c2f68dac8365ac62779d9c1d07d75e6984a80ac5ea5ee387dab098e08de818d8d3eb1adbe0d8c59f997cbd9722cc742f09e0a860028ab60c72f16457c1334fef4603662bb98482946048318f15812024aa4fec8d3ff762303ac0bb36fd09541dc6d3cb41e6ba57e9166b8b39f987fbaebcb0ba7e88b05c9edb4ef0d1809eaca058a848b64ec4fd806795931ec96ea11e9afe6eb25e49dc6a1af91233ddbee3f1dbc7c44526fb5222bae05c43a165fd076aace54eac1a076321da4d443340f7f3fdb85ed6635cc241bab7c6ea801a3ed30314f49b64e10e42e53addb70c37f84af9e0c396324cb2df7ea943a8186782454cf00fb19bb5d48cfb51f93e9487fef398c24e0ba39bdbc79ad5e8aaff8162f7d50dd2e32c8b51d638d75bc238c48a2dae78112c97150760cca77b72f5a17dbbcb34f48606932066b47054d761d1293c7f4368dcbbb7f295430f8b9ce782b0d8f20ccb1376d3dcf9782c4003f2d3b0e3a66423b9b02f9a1e57e3c3a77b2634670f3836c191881b60fb7ddbc997007372f8aa944c61237d0e209f6e9c05009fc645592a36cee2c78b2005b7ee68139c31e1e5e82e272d206f15d97da10e4f185905072b8aaf6a1a576984b6561d9b4bfa39e0ea06db5a63bb3f4c867cf899a88dd5a230fd78fbced207e8f515655e50759b0f3460", 0xff4}], 0x1) 19:33:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) 19:33:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}}, 0x0) [ 65.526331][ T4165] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 65.546228][ C1] sd 0:0:1:0: tag#5998 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 65.556078][ C1] sd 0:0:1:0: tag#5998 CDB: opcode=0xe5 (vendor) [ 65.556096][ C1] sd 0:0:1:0: tag#5998 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:33:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19:33:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8ec0, 0x0) splice(r0, 0x0, r3, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19:33:49 executing program 5: unshare(0x2040400) r0 = socket$inet(0x2, 0xa, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) [ 65.556116][ C1] sd 0:0:1:0: tag#5998 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 65.556159][ C1] sd 0:0:1:0: tag#5998 CDB[20]: ba [ 65.596636][ T4175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffffffffffff8) dup2(r0, r1) 19:33:49 executing program 4: unshare(0x40000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 19:33:49 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 65.608179][ T22] audit: type=1400 audit(1634844829.192:139): avc: denied { connect } for pid=4168 comm="syz-executor.2" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.629081][ T4182] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 19:33:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') pwrite64(r0, 0x0, 0x0, 0x6) 19:33:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) 19:33:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) 19:33:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') pwrite64(r0, 0x0, 0x0, 0x6) 19:33:49 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 65.747516][ T4195] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 65.755609][ T4195] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.765561][ C1] sd 0:0:1:0: tag#5999 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 65.775518][ C1] sd 0:0:1:0: tag#5999 CDB: opcode=0xe5 (vendor) [ 65.781907][ C1] sd 0:0:1:0: tag#5999 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:33:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') pwrite64(r0, 0x0, 0x0, 0x6) 19:33:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 19:33:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) [ 65.790980][ C1] sd 0:0:1:0: tag#5999 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 65.791001][ C1] sd 0:0:1:0: tag#5999 CDB[20]: ba [ 65.806642][ C1] sd 0:0:1:0: tag#6000 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 65.806665][ C1] sd 0:0:1:0: tag#6000 CDB: opcode=0xe5 (vendor) 19:33:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') pwrite64(r0, 0x0, 0x0, 0x6) 19:33:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x25}, {0x6}]}) 19:33:49 executing program 4: unshare(0x40000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) [ 65.806681][ C1] sd 0:0:1:0: tag#6000 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 65.806716][ C1] sd 0:0:1:0: tag#6000 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 65.806733][ C1] sd 0:0:1:0: tag#6000 CDB[20]: ba [ 65.827880][ T4212] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 65.875269][ T4212] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. 19:33:49 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:33:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) [ 65.929582][ T22] audit: type=1326 audit(1634844829.512:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ada1a39 code=0x0 19:33:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) [ 66.009391][ T4223] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 66.017518][ T4223] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.022199][ C1] sd 0:0:1:0: tag#6001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.036662][ C1] sd 0:0:1:0: tag#6001 CDB: opcode=0xe5 (vendor) [ 66.043014][ C1] sd 0:0:1:0: tag#6001 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 66.052072][ C1] sd 0:0:1:0: tag#6001 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 66.061124][ C1] sd 0:0:1:0: tag#6001 CDB[20]: ba 19:33:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) 19:33:49 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:33:49 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 19:33:49 executing program 4: unshare(0x40000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 19:33:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x25}, {0x6}]}) 19:33:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) [ 66.255311][ C1] sd 0:0:1:0: tag#6002 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.265169][ C1] sd 0:0:1:0: tag#6002 CDB: opcode=0xe5 (vendor) [ 66.271500][ T22] audit: type=1326 audit(1634844829.832:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ada1a39 code=0x0 [ 66.271515][ C1] sd 0:0:1:0: tag#6002 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:33:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x25}, {0x6}]}) [ 66.271546][ C1] sd 0:0:1:0: tag#6002 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 66.312831][ C1] sd 0:0:1:0: tag#6002 CDB[20]: ba [ 66.313429][ T4243] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 19:33:49 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="13fce8daa43eaebede66530700ae897094e7b126b097eaa7be6d05c41bd34e677d114b654b49938c9a3f5b80612ab3dcd94d1db6e81c0b", 0x37}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:49 executing program 4: unshare(0x40000000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) [ 66.313443][ T4243] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.326164][ C0] sd 0:0:1:0: tag#6003 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.326186][ C0] sd 0:0:1:0: tag#6003 CDB: opcode=0xe5 (vendor) 19:33:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="13fce8daa43eaebede66530700ae897094e7b126b097eaa7be6d05c41bd34e677d114b654b49938c9a3f5b80612ab3dcd94d1db6e81c0b", 0x37}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x25}, {0x6}]}) [ 66.326203][ C0] sd 0:0:1:0: tag#6003 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 66.326222][ C0] sd 0:0:1:0: tag#6003 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 66.326241][ C0] sd 0:0:1:0: tag#6003 CDB[20]: ba 19:33:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b0007f833000000000000000000005d8efa2114e67a225b95a200000000000000000000000000000040000000000000000000000000000000ffffffffffff370400000000000000000000039558c743f2f7da00"/120], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x955a1f34}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1e) 19:33:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="13fce8daa43eaebede66530700ae897094e7b126b097eaa7be6d05c41bd34e677d114b654b49938c9a3f5b80612ab3dcd94d1db6e81c0b", 0x37}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:33:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000f80)=""/47, 0x2f) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000) [ 66.363279][ T22] audit: type=1326 audit(1634844829.932:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ada1a39 code=0x0 19:33:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="8ce13580e847e471f17c7b19f75b6c3dbbc646973f2703d3e7b45ce5d518acc07972099e05bcd2738df5da924809ec08a5272aedf3665212f91579917a429162057e03937ff7a075", 0x48}, {&(0x7f0000000000)="dbefa1", 0xfffffdeb}, {&(0x7f00000001c0)="8695155ecd925855b4842fadc281b5c41fe6f1102aa874a5d233822b6006fadc846ecbf9b622e11e8cfe5d89cb1a8779a6e72bf4cc0bd070a09c093e4d819104efeaa516dac04ae29b14c1c70b871bdc3d04fd42d6306a44072ada4c6602e1d2", 0x60}, {&(0x7f0000000240)="649684e90bb4fe97dc59a1c5a3d65d1bc3ac6a2f20f8e1a4d4f35117ce549d5c4bd5347465daa457eceda1c75eb7e5f9c6ac59602b594a0a32a93a06f766bc2843a0ef9927d58dd9def75ea5581cfbc354da5df673cabb92245b641993313fa254e9c1525bca8def35f0a6ff8c8717b90bc4214dc4d910f02d47d588ee187204a1c51de678f64a4629a27739f3e682a084cb38d2bef57803cf1c4328527ecd9cd5da93f5c2542708b10d3b5c7be80db68cf072ea2cd228fc95e25a82fa2adf74854159860c75f5416548cb488848d7bc0a", 0xd1}, {&(0x7f0000000340)="5dcb953b5b582b53965de8af32a1922d7d853322b978a2b012428218216f718972a80ce9966dd79d4fcb260c18b50112275952b6d1a96f58885ae3ea704ce5a8db713162677850d566ad43024f15180019626c19b11cbe116da6f45b09ab91e3e6367a66d63065eb3cd4", 0x6a}], 0x5}}], 0x2, 0x4040) 19:33:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="13fce8daa43eaebede66530700ae897094e7b126b097eaa7be6d05c41bd34e677d114b654b49938c9a3f5b80612ab3dcd94d1db6e81c0b", 0x37}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 66.453358][ T22] audit: type=1326 audit(1634844830.032:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ada1a39 code=0x0 [ 66.460674][ T4258] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 66.460695][ T4258] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.522111][ C0] sd 0:0:1:0: tag#6004 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 66.522133][ C0] sd 0:0:1:0: tag#6004 CDB: opcode=0xe5 (vendor) [ 66.522149][ C0] sd 0:0:1:0: tag#6004 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 66.522165][ C0] sd 0:0:1:0: tag#6004 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 19:33:50 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, 0xffffffffffffffff, 0x0) 19:33:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000f80)=""/47, 0x2f) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000) [ 66.522180][ C0] sd 0:0:1:0: tag#6004 CDB[20]: ba 19:33:50 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="8ce13580e847e471f17c7b19f75b6c3dbbc646973f2703d3e7b45ce5d518acc07972099e05bcd2738df5da924809ec08a5272aedf3665212f91579917a429162057e03937ff7a075", 0x48}, {&(0x7f0000000000)="dbefa1", 0xfffffdeb}, {&(0x7f00000001c0)="8695155ecd925855b4842fadc281b5c41fe6f1102aa874a5d233822b6006fadc846ecbf9b622e11e8cfe5d89cb1a8779a6e72bf4cc0bd070a09c093e4d819104efeaa516dac04ae29b14c1c70b871bdc3d04fd42d6306a44072ada4c6602e1d2", 0x60}, {&(0x7f0000000240)="649684e90bb4fe97dc59a1c5a3d65d1bc3ac6a2f20f8e1a4d4f35117ce549d5c4bd5347465daa457eceda1c75eb7e5f9c6ac59602b594a0a32a93a06f766bc2843a0ef9927d58dd9def75ea5581cfbc354da5df673cabb92245b641993313fa254e9c1525bca8def35f0a6ff8c8717b90bc4214dc4d910f02d47d588ee187204a1c51de678f64a4629a27739f3e682a084cb38d2bef57803cf1c4328527ecd9cd5da93f5c2542708b10d3b5c7be80db68cf072ea2cd228fc95e25a82fa2adf74854159860c75f5416548cb488848d7bc0a", 0xd1}, {&(0x7f0000000340)="5dcb953b5b582b53965de8af32a1922d7d853322b978a2b012428218216f718972a80ce9966dd79d4fcb260c18b50112275952b6d1a96f58885ae3ea704ce5a8db713162677850d566ad43024f15180019626c19b11cbe116da6f45b09ab91e3e6367a66d63065eb3cd4", 0x6a}], 0x5}}], 0x2, 0x4040) 19:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) 19:33:50 executing program 2: unshare(0x20040400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') 19:33:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000f80)=""/47, 0x2f) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000) 19:33:50 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, 0xffffffffffffffff, 0x0) 19:33:50 executing program 2: unshare(0x20040400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') 19:33:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="8ce13580e847e471f17c7b19f75b6c3dbbc646973f2703d3e7b45ce5d518acc07972099e05bcd2738df5da924809ec08a5272aedf3665212f91579917a429162057e03937ff7a075", 0x48}, {&(0x7f0000000000)="dbefa1", 0xfffffdeb}, {&(0x7f00000001c0)="8695155ecd925855b4842fadc281b5c41fe6f1102aa874a5d233822b6006fadc846ecbf9b622e11e8cfe5d89cb1a8779a6e72bf4cc0bd070a09c093e4d819104efeaa516dac04ae29b14c1c70b871bdc3d04fd42d6306a44072ada4c6602e1d2", 0x60}, {&(0x7f0000000240)="649684e90bb4fe97dc59a1c5a3d65d1bc3ac6a2f20f8e1a4d4f35117ce549d5c4bd5347465daa457eceda1c75eb7e5f9c6ac59602b594a0a32a93a06f766bc2843a0ef9927d58dd9def75ea5581cfbc354da5df673cabb92245b641993313fa254e9c1525bca8def35f0a6ff8c8717b90bc4214dc4d910f02d47d588ee187204a1c51de678f64a4629a27739f3e682a084cb38d2bef57803cf1c4328527ecd9cd5da93f5c2542708b10d3b5c7be80db68cf072ea2cd228fc95e25a82fa2adf74854159860c75f5416548cb488848d7bc0a", 0xd1}, {&(0x7f0000000340)="5dcb953b5b582b53965de8af32a1922d7d853322b978a2b012428218216f718972a80ce9966dd79d4fcb260c18b50112275952b6d1a96f58885ae3ea704ce5a8db713162677850d566ad43024f15180019626c19b11cbe116da6f45b09ab91e3e6367a66d63065eb3cd4", 0x6a}], 0x5}}], 0x2, 0x4040) 19:33:50 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, 0xffffffffffffffff, 0x0) [ 66.696110][ T4292] FAT-fs (loop3): Unrecognized mount option "uid=00000000000000060929" or missing value 19:33:50 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 2: unshare(0x20040400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') 19:33:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000f80)=""/47, 0x2f) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000) 19:33:50 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, 0xffffffffffffffff, 0x0) 19:33:50 executing program 2: unshare(0x20040400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') [ 66.778508][ T4292] FAT-fs (loop3): Unrecognized mount option "uid=00000000000000060929" or missing value 19:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) 19:33:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="8ce13580e847e471f17c7b19f75b6c3dbbc646973f2703d3e7b45ce5d518acc07972099e05bcd2738df5da924809ec08a5272aedf3665212f91579917a429162057e03937ff7a075", 0x48}, {&(0x7f0000000000)="dbefa1", 0xfffffdeb}, {&(0x7f00000001c0)="8695155ecd925855b4842fadc281b5c41fe6f1102aa874a5d233822b6006fadc846ecbf9b622e11e8cfe5d89cb1a8779a6e72bf4cc0bd070a09c093e4d819104efeaa516dac04ae29b14c1c70b871bdc3d04fd42d6306a44072ada4c6602e1d2", 0x60}, {&(0x7f0000000240)="649684e90bb4fe97dc59a1c5a3d65d1bc3ac6a2f20f8e1a4d4f35117ce549d5c4bd5347465daa457eceda1c75eb7e5f9c6ac59602b594a0a32a93a06f766bc2843a0ef9927d58dd9def75ea5581cfbc354da5df673cabb92245b641993313fa254e9c1525bca8def35f0a6ff8c8717b90bc4214dc4d910f02d47d588ee187204a1c51de678f64a4629a27739f3e682a084cb38d2bef57803cf1c4328527ecd9cd5da93f5c2542708b10d3b5c7be80db68cf072ea2cd228fc95e25a82fa2adf74854159860c75f5416548cb488848d7bc0a", 0xd1}, {&(0x7f0000000340)="5dcb953b5b582b53965de8af32a1922d7d853322b978a2b012428218216f718972a80ce9966dd79d4fcb260c18b50112275952b6d1a96f58885ae3ea704ce5a8db713162677850d566ad43024f15180019626c19b11cbe116da6f45b09ab91e3e6367a66d63065eb3cd4", 0x6a}], 0x5}}], 0x2, 0x4040) 19:33:50 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 19:33:50 executing program 2: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:33:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback}, 0x8, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) [ 66.874756][ T4319] FAT-fs (loop3): Unrecognized mount option "uid=00000000000000060929" or missing value 19:33:50 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/90) 19:33:50 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x2008000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, [{}]}) 19:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) 19:33:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback}, 0x8, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 19:33:50 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80a}, {0x9, 0x9}, {0xfff}]}) 19:33:50 executing program 2: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:33:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x2008000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, [{}]}) [ 66.998622][ T4337] FAT-fs (loop3): Unrecognized mount option "uid=00000000000000060929" or missing value 19:33:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x2008000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, [{}]}) 19:33:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 19:33:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback}, 0x8, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 19:33:50 executing program 4: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000019c0), 0x0, &(0x7f0000001a80)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) 19:33:50 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x2008000) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, [{}]}) 19:33:50 executing program 2: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:33:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback}, 0x8, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 19:33:50 executing program 4: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 67.120165][ T4359] FAT-fs (loop3): Unrecognized mount option "uid=00000000000000060929" or missing value 19:33:50 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000240)=0xffffffff00000001, 0x0, 0x0) 19:33:50 executing program 3: unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 19:33:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, @hci, @l2tp={0x2, 0x0, @loopback, 0x2}, @l2, 0x0, 0x0, 0x0, 0x2}) 19:33:50 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000240)=0xffffffff00000001, 0x0, 0x0) 19:33:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 19:33:50 executing program 2: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:33:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000f000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000001", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 19:33:50 executing program 4: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x10) syz_io_uring_setup(0x2de9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 67.246254][ T22] audit: type=1400 audit(1634844830.822:144): avc: denied { setopt } for pid=4375 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 19:33:50 executing program 3: unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 19:33:50 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000240)=0xffffffff00000001, 0x0, 0x0) 19:33:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) [ 67.314117][ T4386] loop1: detected capacity change from 0 to 131456 [ 67.346729][ T4386] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.356520][ T4386] EXT4-fs (loop1): group descriptors corrupted! 19:33:50 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000240)=0xffffffff00000001, 0x0, 0x0) 19:33:50 executing program 4: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 19:33:50 executing program 3: unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 19:33:51 executing program 4: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 19:33:51 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 19:33:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) [ 67.461993][ T4386] loop1: detected capacity change from 0 to 131456 [ 67.476083][ T4386] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.485855][ T4386] EXT4-fs (loop1): group descriptors corrupted! [ 67.518648][ T4407] ======================================================= [ 67.518648][ T4407] WARNING: The mand mount option has been deprecated and [ 67.518648][ T4407] and is ignored by this kernel. Remove the mand [ 67.518648][ T4407] option from the mount to silence this warning. [ 67.518648][ T4407] ======================================================= 19:33:51 executing program 4: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') 19:33:51 executing program 3: unshare(0x400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 19:33:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 19:33:51 executing program 5: chdir(0x0) symlink(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 19:33:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000f000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000001", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 67.518657][ T22] audit: type=1400 audit(1634844831.102:145): avc: denied { mounton } for pid=4402 comm="syz-executor.0" path="/root/syzkaller-testdir236121349/syzkaller.Q3eBUx/83/bus" dev="sda1" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 19:33:51 executing program 5: chdir(0x0) symlink(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 19:33:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 19:33:51 executing program 4: sysfs$1(0x1, &(0x7f0000000100)='sysfs\x00') [ 67.635691][ T4419] loop1: detected capacity change from 0 to 131456 [ 67.642764][ T22] audit: type=1400 audit(1634844831.222:146): avc: denied { map } for pid=4402 comm="syz-executor.0" path="/root/syzkaller-testdir236121349/syzkaller.Q3eBUx/83/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.672006][ T4419] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 19:33:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:33:51 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 5: chdir(0x0) symlink(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 19:33:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:33:51 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) [ 67.681779][ T4419] EXT4-fs (loop1): group descriptors corrupted! 19:33:51 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 5: chdir(0x0) symlink(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 19:33:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000f000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000001", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 19:33:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 19:33:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x1}, {0x4d}, {0x6, 0x0, 0x0, 0x7fff8002}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 19:33:51 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 67.774169][ T4440] loop1: detected capacity change from 0 to 131456 [ 67.789252][ T4440] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.799092][ T4440] EXT4-fs (loop1): group descriptors corrupted! 19:33:51 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x1}, {0x4d}, {0x6, 0x0, 0x0, 0x7fff8002}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 19:33:51 executing program 3: io_setup(0x800, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$nbd(r2, &(0x7f0000000180), 0x10) 19:33:51 executing program 2: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000f000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000001", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 19:33:51 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 19:33:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x1}, {0x4d}, {0x6, 0x0, 0x0, 0x7fff8002}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 19:33:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x34, 0x0, 0x0, 0x1}, {0x4d}, {0x6, 0x0, 0x0, 0x7fff8002}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 19:33:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:51 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x9044, &(0x7f00000007c0)) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) [ 67.936975][ T4466] loop1: detected capacity change from 0 to 131456 [ 67.944553][ T4466] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.954412][ T4466] EXT4-fs (loop1): group descriptors corrupted! 19:33:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:51 executing program 3: io_setup(0x800, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$nbd(r2, &(0x7f0000000180), 0x10) 19:33:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfffe, 0x0, 0x0, 0x1, 0x0, "02f100e598ddc040"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 19:33:51 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="0908000a8e20c01c", 0x8}], 0x3, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x120, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x22) 19:33:51 executing program 3: io_setup(0x800, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$nbd(r2, &(0x7f0000000180), 0x10) 19:33:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfffe, 0x0, 0x0, 0x1, 0x0, "02f100e598ddc040"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 19:33:51 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfffe, 0x0, 0x0, 0x1, 0x0, "02f100e598ddc040"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 19:33:51 executing program 3: io_setup(0x800, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$nbd(r2, &(0x7f0000000180), 0x10) 19:33:51 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:52 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:52 executing program 4: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfffe, 0x0, 0x0, 0x1, 0x0, "02f100e598ddc040"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 19:33:52 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x0, 0x0) fcntl$lock(r2, 0x40d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)=ANY=[]) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x73, 0x1f, @buffer={0x0, 0x6d, &(0x7f00000002c0)=""/109}, &(0x7f00000000c0)="b9d87b21a39b897fe812583d768c9d5a8c9555f47730578291ff5d58b866a26f63eb99877528efe5a9f2b690ebf603a23b1d27e29124b070f327c05679280b332f858c7784b2a6e7463f93397508ed54391db9ea2c132e83c663cd3d63e8558bcfd2979ad444701d06c01a0e0be5863c79b460", &(0x7f0000001480)=""/4112, 0x6, 0x10015, 0x2, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() unshare(0x22060400) gettid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) clone(0x20800000, &(0x7f0000000040)="dd988a27a70c", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="23f4254e3c38e071c94a2b3c6b63711c10f57d02591ba0480e0fb1ab2cc5fe812e958a6cd037720d97") 19:33:52 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:52 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) 19:33:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:52 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x0, 0x0) fcntl$lock(r2, 0x40d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)=ANY=[]) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x73, 0x1f, @buffer={0x0, 0x6d, &(0x7f00000002c0)=""/109}, &(0x7f00000000c0)="b9d87b21a39b897fe812583d768c9d5a8c9555f47730578291ff5d58b866a26f63eb99877528efe5a9f2b690ebf603a23b1d27e29124b070f327c05679280b332f858c7784b2a6e7463f93397508ed54391db9ea2c132e83c663cd3d63e8558bcfd2979ad444701d06c01a0e0be5863c79b460", &(0x7f0000001480)=""/4112, 0x6, 0x10015, 0x2, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() unshare(0x22060400) gettid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) clone(0x20800000, &(0x7f0000000040)="dd988a27a70c", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="23f4254e3c38e071c94a2b3c6b63711c10f57d02591ba0480e0fb1ab2cc5fe812e958a6cd037720d97") [ 68.997397][ C0] sd 0:0:1:0: tag#5991 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.007312][ C0] sd 0:0:1:0: tag#5991 CDB: opcode=0xe5 (vendor) [ 69.013666][ C0] sd 0:0:1:0: tag#5991 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.022729][ C0] sd 0:0:1:0: tag#5991 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.031963][ C0] sd 0:0:1:0: tag#5991 CDB[20]: ba 19:33:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) 19:33:52 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x0, 0x0) fcntl$lock(r2, 0x40d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)=ANY=[]) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x73, 0x1f, @buffer={0x0, 0x6d, &(0x7f00000002c0)=""/109}, &(0x7f00000000c0)="b9d87b21a39b897fe812583d768c9d5a8c9555f47730578291ff5d58b866a26f63eb99877528efe5a9f2b690ebf603a23b1d27e29124b070f327c05679280b332f858c7784b2a6e7463f93397508ed54391db9ea2c132e83c663cd3d63e8558bcfd2979ad444701d06c01a0e0be5863c79b460", &(0x7f0000001480)=""/4112, 0x6, 0x10015, 0x2, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() unshare(0x22060400) gettid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) clone(0x20800000, &(0x7f0000000040)="dd988a27a70c", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="23f4254e3c38e071c94a2b3c6b63711c10f57d02591ba0480e0fb1ab2cc5fe812e958a6cd037720d97") [ 69.067379][ C0] sd 0:0:1:0: tag#5992 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.077281][ C0] sd 0:0:1:0: tag#5992 CDB: opcode=0xe5 (vendor) [ 69.083665][ C0] sd 0:0:1:0: tag#5992 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.092702][ C0] sd 0:0:1:0: tag#5992 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.101738][ C0] sd 0:0:1:0: tag#5992 CDB[20]: ba [ 69.125924][ C0] sd 0:0:1:0: tag#5993 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.135777][ C0] sd 0:0:1:0: tag#5993 CDB: opcode=0xe5 (vendor) [ 69.142144][ C0] sd 0:0:1:0: tag#5993 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.151294][ C0] sd 0:0:1:0: tag#5993 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.160355][ C0] sd 0:0:1:0: tag#5993 CDB[20]: ba 19:33:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) 19:33:53 executing program 4: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:53 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x0, 0x0) fcntl$lock(r2, 0x40d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)=ANY=[]) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x73, 0x1f, @buffer={0x0, 0x6d, &(0x7f00000002c0)=""/109}, &(0x7f00000000c0)="b9d87b21a39b897fe812583d768c9d5a8c9555f47730578291ff5d58b866a26f63eb99877528efe5a9f2b690ebf603a23b1d27e29124b070f327c05679280b332f858c7784b2a6e7463f93397508ed54391db9ea2c132e83c663cd3d63e8558bcfd2979ad444701d06c01a0e0be5863c79b460", &(0x7f0000001480)=""/4112, 0x6, 0x10015, 0x2, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() unshare(0x22060400) gettid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) clone(0x20800000, &(0x7f0000000040)="dd988a27a70c", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="23f4254e3c38e071c94a2b3c6b63711c10f57d02591ba0480e0fb1ab2cc5fe812e958a6cd037720d97") 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) [ 69.868093][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 69.868105][ T22] audit: type=1326 audit(1634844833.452:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x0 19:33:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) 19:33:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x5cdd, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000940000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) 19:33:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffffffffffe0) close(r0) [ 69.978940][ T22] audit: type=1326 audit(1634844833.562:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe592fd9a39 code=0x0 19:33:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 70.084551][ T4568] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:54 executing program 4: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) 19:33:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:33:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x5cdd, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000940000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) 19:33:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 70.722010][ T22] audit: type=1326 audit(1634844834.302:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x0 [ 70.746017][ T4577] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x5cdd, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000940000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) 19:33:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() fcntl$setown(r0, 0x8, 0x0) [ 70.772437][ T4579] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x240100, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xfff, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) 19:33:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:33:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x5cdd, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000940000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) [ 70.828403][ T22] audit: type=1326 audit(1634844834.412:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe592fd9a39 code=0x0 19:33:54 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 70.875879][ T4586] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:54 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 19:33:54 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 70.964876][ T4006] kernel write not supported for file /vcs (pid: 4006 comm: kworker/0:3) 19:33:55 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:33:55 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0x2, 0x8) 19:33:55 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 19:33:55 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x80000001, 0x101) r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x3) ioctl$FIBMAP(r3, 0x1, 0x0) io_uring_enter(r0, 0x3c69, 0x0, 0x0, 0x0, 0x0) 19:33:55 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 71.577194][ T4040] kernel write not supported for file /vcs (pid: 4040 comm: kworker/1:3) 19:33:55 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0x2, 0x8) 19:33:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="a1e230b6", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x74) write$binfmt_aout(r0, &(0x7f0000000240)={{0x83}, "0253c6ee85eef011acf6a995a983727816c2"}, 0x32) 19:33:55 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x80000001, 0x101) r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x3) ioctl$FIBMAP(r3, 0x1, 0x0) io_uring_enter(r0, 0x3c69, 0x0, 0x0, 0x0, 0x0) 19:33:55 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:33:55 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fork() clone3(0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/74) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:33:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x15, 0xd9f, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f00000001c0)="c42271bba30945c4930f72d106c4c27d13b20000000036c7f80b000000c4417d70b8930000003cc4637d192553000000eec483b121e70015c442f9aa6cf06cf010562ec402b1b824c290", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000400)) close(r0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000180)='9', 0x1}], 0x1, 0x0) 19:33:55 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x80000001, 0x101) r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x3) ioctl$FIBMAP(r3, 0x1, 0x0) io_uring_enter(r0, 0x3c69, 0x0, 0x0, 0x0, 0x0) 19:33:55 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0x2, 0x8) [ 71.753488][ T22] audit: type=1400 audit(1634844835.332:158): avc: denied { ioctl } for pid=4618 comm="syz-executor.2" path="socket:[17118]" dev="sockfs" ino=17118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.780048][ T4006] kernel write not supported for file /vcs (pid: 4006 comm: kworker/0:3) 19:33:55 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:33:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x15, 0xd9f, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f00000001c0)="c42271bba30945c4930f72d106c4c27d13b20000000036c7f80b000000c4417d70b8930000003cc4637d192553000000eec483b121e70015c442f9aa6cf06cf010562ec402b1b824c290", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000400)) close(r0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000180)='9', 0x1}], 0x1, 0x0) 19:33:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="a1e230b6", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x74) write$binfmt_aout(r0, &(0x7f0000000240)={{0x83}, "0253c6ee85eef011acf6a995a983727816c2"}, 0x32) [ 71.806599][ T22] audit: type=1400 audit(1634844835.372:159): avc: denied { bind } for pid=4618 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 19:33:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x15, 0xd9f, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f00000001c0)="c42271bba30945c4930f72d106c4c27d13b20000000036c7f80b000000c4417d70b8930000003cc4637d192553000000eec483b121e70015c442f9aa6cf06cf010562ec402b1b824c290", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000400)) close(r0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000180)='9', 0x1}], 0x1, 0x0) 19:33:55 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0x2, 0x8) 19:33:55 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x80000001, 0x101) r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x3) ioctl$FIBMAP(r3, 0x1, 0x0) io_uring_enter(r0, 0x3c69, 0x0, 0x0, 0x0, 0x0) 19:33:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="a1e230b6", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x74) write$binfmt_aout(r0, &(0x7f0000000240)={{0x83}, "0253c6ee85eef011acf6a995a983727816c2"}, 0x32) [ 71.853589][ T4006] kernel write not supported for file /vcs (pid: 4006 comm: kworker/0:3) 19:33:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48010000190021082bbd7000fedbdf250a010102000000000000000000000000fc0100000000000000000000000000004e22add94e2000040a00402042000000", @ANYRES32=0x0, @ANYBLOB="16"], 0x148}}, 0x0) 19:33:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="a1e230b6", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x74) write$binfmt_aout(r0, &(0x7f0000000240)={{0x83}, "0253c6ee85eef011acf6a995a983727816c2"}, 0x32) 19:33:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x15, 0xd9f, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f00000001c0)="c42271bba30945c4930f72d106c4c27d13b20000000036c7f80b000000c4417d70b8930000003cc4637d192553000000eec483b121e70015c442f9aa6cf06cf010562ec402b1b824c290", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000400)) close(r0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000180)='9', 0x1}], 0x1, 0x0) 19:33:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 3: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3'}]}, 0x87) r1 = dup(r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000100)) [ 71.947919][ T4658] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48010000190021082bbd7000fedbdf250a010102000000000000000000000000fc0100000000000000000000000000004e22add94e2000040a00402042000000", @ANYRES32=0x0, @ANYBLOB="16"], 0x148}}, 0x0) 19:33:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\xc5\x97<\xbfX-\xc5\xb3\x13', 0x4) lseek(r0, 0x0, 0x1) 19:33:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 72.047166][ T22] audit: type=1400 audit(1634844835.622:160): avc: denied { execute } for pid=4677 comm="syz-executor.3" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.074804][ T22] audit: type=1400 audit(1634844835.622:161): avc: denied { create } for pid=4677 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 19:33:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 3: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3'}]}, 0x87) r1 = dup(r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 19:33:55 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000400)=0x81, 0x4) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0xc805) 19:33:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x100000001, 0x43) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000100)) 19:33:55 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\xc5\x97<\xbfX-\xc5\xb3\x13', 0x4) lseek(r0, 0x0, 0x1) 19:33:55 executing program 3: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3'}]}, 0x87) r1 = dup(r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000100)) [ 72.095666][ T22] audit: type=1400 audit(1634844835.622:162): avc: denied { getopt } for pid=4677 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.124321][ T4678] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:55 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\xc5\x97<\xbfX-\xc5\xb3\x13', 0x4) lseek(r0, 0x0, 0x1) 19:33:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48010000190021082bbd7000fedbdf250a010102000000000000000000000000fc0100000000000000000000000000004e22add94e2000040a00402042000000", @ANYRES32=0x0, @ANYBLOB="16"], 0x148}}, 0x0) 19:33:55 executing program 1: set_mempolicy(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 19:33:55 executing program 3: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3'}]}, 0x87) r1 = dup(r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 19:33:55 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000400)=0x81, 0x4) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0xc805) [ 72.246552][ T22] audit: type=1326 audit(1634844835.822:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604ada1a39 code=0x0 [ 72.278207][ T4704] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:33:56 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\xc5\x97<\xbfX-\xc5\xb3\x13', 0x4) lseek(r0, 0x0, 0x1) 19:33:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @empty}, 0xc) 19:33:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48010000190021082bbd7000fedbdf250a010102000000000000000000000000fc0100000000000000000000000000004e22add94e2000040a00402042000000", @ANYRES32=0x0, @ANYBLOB="16"], 0x148}}, 0x0) 19:33:56 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000400)=0x81, 0x4) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0xc805) 19:33:56 executing program 1: set_mempolicy(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 19:33:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x400, 0x0, 0xff, 0x2}, 0x20) 19:33:56 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000400)=0x81, 0x4) sendmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x4, 0x0}}, {{0x0, 0xc000, &(0x7f0000000780), 0x2f3}}], 0x400000000000316, 0xc805) 19:33:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 19:33:56 executing program 1: set_mempolicy(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 19:33:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x400, 0x0, 0xff, 0x2}, 0x20) [ 73.018215][ T4719] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 19:33:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000000000000000000000000000001600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 19:33:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:33:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x400, 0x0, 0xff, 0x2}, 0x20) 19:33:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xbb}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14cef40500ffffff80000000fe02000000020000", 0x1c) 19:33:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 19:33:57 executing program 1: set_mempolicy(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 19:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000000000000000000000000000001600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 19:33:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xbb}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14cef40500ffffff80000000fe02000000020000", 0x1c) 19:33:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 19:33:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x400, 0x0, 0xff, 0x2}, 0x20) 19:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000000000000000000000000000001600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 19:33:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xbb}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14cef40500ffffff80000000fe02000000020000", 0x1c) 19:33:57 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 19:33:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:33:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x4b33, &(0x7f0000000000)) 19:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000000000000000000000000000001600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 19:33:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 19:33:57 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 19:33:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xbb}, 0x10) write(r0, &(0x7f00000000c0)="1c0000001a009b8a14cef40500ffffff80000000fe02000000020000", 0x1c) 19:33:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100000100020800028005000000", 0x24) 19:33:57 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=tcp,', {}, 0x2c, {[{@privport}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}, 0x22}], 0x22}}) 19:33:57 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 19:33:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:33:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000040)="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") 19:33:57 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=tcp,', {}, 0x2c, {[{@privport}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}, 0x22}], 0x22}}) [ 74.161363][ T4788] autofs4:pid:4788:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 19:33:57 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=tcp,', {}, 0x2c, {[{@privport}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}, 0x22}], 0x22}}) 19:33:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100000100020800028005000000", 0x24) 19:33:57 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 19:33:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000040)="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") 19:33:57 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) 19:33:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100000100020800028005000000", 0x24) 19:33:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:33:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000040)="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") 19:33:57 executing program 3: setfsuid(0xee01) r0 = fork() ptrace(0x10, r0) [ 74.234324][ T4800] autofs4:pid:4800:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 19:33:57 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=tcp,', {}, 0x2c, {[{@privport}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}, 0x22}], 0x22}}) 19:33:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:33:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100000100020800028005000000", 0x24) 19:33:57 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) 19:33:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000040)="0100000000000000180100000508000300000000000000002fe63f596f10f6424dd13f97b3d25ad7e94dce9947a17d6de9766def174c3e3843eba0edb30203f6b0578ffd3193465af44e97a06f3f10cb18a2a028cab95d0312212d6728a0485d69eb6c5607062ca7b6491f5e42d3c12996c401fa742c01c60c1918944aff21d7aab8ba2f40d4c87eb210cf914f3592f2b4c4f09ced6c6f881f3a71d7a442eba630c49c32da4fbde36ff48a92100b5e855c02b16a16b0d62ef4e81cd7bea6ebd436ff14c342a0dd871c426ff7ecf984a98185da22fd3df338a5b8b23db032a923614ed3da351273b09e8d674379412b712401a87bb50d22c8e0ae49017d7672555105f9ca24560d31ba92f1ba13747c8ed0d11440b813367c") 19:33:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) [ 74.292209][ T4815] autofs4:pid:4815:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 19:33:57 executing program 3: setfsuid(0xee01) r0 = fork() ptrace(0x10, r0) 19:33:57 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) 19:33:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:33:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) 19:33:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/224, 0xe0}], 0x1, 0x80, 0x0) [ 74.380827][ T4831] autofs4:pid:4831:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 19:33:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 19:33:58 executing program 3: setfsuid(0xee01) r0 = fork() ptrace(0x10, r0) 19:33:58 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:33:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 19:33:58 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) 19:33:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 19:33:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/224, 0xe0}], 0x1, 0x80, 0x0) 19:33:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 19:33:58 executing program 3: setfsuid(0xee01) r0 = fork() ptrace(0x10, r0) 19:33:58 executing program 0: r0 = io_uring_setup(0x310b, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x13, 0x0, 0x0) 19:33:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 19:33:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 19:33:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/224, 0xe0}], 0x1, 0x80, 0x0) 19:33:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0xff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='selinuxfs\x00', 0x0, &(0x7f0000000300)=',@&+\xa8\\]\x00') [ 74.651781][ T4880] selinuxfs: Unknown parameter '@&+¨\]' 19:33:58 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:33:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 19:33:58 executing program 0: r0 = io_uring_setup(0x310b, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x13, 0x0, 0x0) 19:33:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/224, 0xe0}], 0x1, 0x80, 0x0) 19:33:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0xff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='selinuxfs\x00', 0x0, &(0x7f0000000300)=',@&+\xa8\\]\x00') 19:33:58 executing program 1: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x947ef000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x39, 0x64]}}}, 0x2f}], [], 0x4e}) 19:33:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0xff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='selinuxfs\x00', 0x0, &(0x7f0000000300)=',@&+\xa8\\]\x00') 19:33:58 executing program 0: r0 = io_uring_setup(0x310b, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x13, 0x0, 0x0) 19:33:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="a27588f4d7f2", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:33:58 executing program 1: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x947ef000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x39, 0x64]}}}, 0x2f}], [], 0x4e}) 19:33:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x100000000}}], [{@context={'context', 0x3d, 'root'}}]}) [ 74.845291][ T4886] tmpfs: Bad value for 'mpol' [ 74.855890][ T4892] selinuxfs: Unknown parameter '@&+¨\]' [ 74.873116][ T4887] tmpfs: Bad value for 'mpol' 19:33:58 executing program 1: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x947ef000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x39, 0x64]}}}, 0x2f}], [], 0x4e}) [ 74.924196][ T4904] selinuxfs: Unknown parameter '@&+¨\]' [ 74.931154][ T4910] tmpfs: Bad value for 'mpol' [ 74.977352][ T4915] tmpfs: Bad value for 'mpol' 19:33:58 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:33:58 executing program 0: r0 = io_uring_setup(0x310b, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x13, 0x0, 0x0) 19:33:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="a27588f4d7f2", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:33:58 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0xff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='selinuxfs\x00', 0x0, &(0x7f0000000300)=',@&+\xa8\\]\x00') 19:33:58 executing program 1: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x947ef000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x39, 0x64]}}}, 0x2f}], [], 0x4e}) 19:33:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x100000000}}], [{@context={'context', 0x3d, 'root'}}]}) 19:33:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xac}, {0x6}]}, 0x10) r2 = dup2(r0, r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 19:33:58 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x7ce7, &(0x7f00000000c0), &(0x7f0000d8d000/0x2000)=nil, &(0x7f0000d8c000/0x1000)=nil, &(0x7f0000000140), 0x0) dup2(r3, r0) 19:33:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="a27588f4d7f2", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 75.174028][ T4919] selinuxfs: Unknown parameter '@&+¨\]' [ 75.185222][ T4926] tmpfs: Bad value for 'mpol' 19:33:58 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40086602, &(0x7f0000000000)) 19:33:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xac}, {0x6}]}, 0x10) r2 = dup2(r0, r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 19:33:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x100000000}}], [{@context={'context', 0x3d, 'root'}}]}) 19:33:59 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x6500, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:33:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x7ce7, &(0x7f00000000c0), &(0x7f0000d8d000/0x2000)=nil, &(0x7f0000d8c000/0x1000)=nil, &(0x7f0000000140), 0x0) dup2(r3, r0) 19:33:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="a27588f4d7f2", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:33:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:33:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xac}, {0x6}]}, 0x10) r2 = dup2(r0, r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 19:33:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x100000000}}], [{@context={'context', 0x3d, 'root'}}]}) 19:33:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xac}, {0x6}]}, 0x10) r2 = dup2(r0, r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 19:33:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:33:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 19:33:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x7ce7, &(0x7f00000000c0), &(0x7f0000d8d000/0x2000)=nil, &(0x7f0000d8c000/0x1000)=nil, &(0x7f0000000140), 0x0) dup2(r3, r0) 19:33:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 19:33:59 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000840)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 19:33:59 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000840)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 19:33:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:33:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 19:33:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x7ce7, &(0x7f00000000c0), &(0x7f0000d8d000/0x2000)=nil, &(0x7f0000d8c000/0x1000)=nil, &(0x7f0000000140), 0x0) dup2(r3, r0) 19:33:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 19:33:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 19:33:59 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000840)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 19:33:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 19:33:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 19:33:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19:33:59 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000840)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 19:33:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 19:33:59 executing program 4: syz_io_uring_setup(0x28a0, &(0x7f0000000300), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 19:33:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 19:33:59 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x8002) 19:33:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, @nl=@unspec, @nfc}) 19:33:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 19:33:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) [ 76.033978][ T5002] mmap: syz-executor.4 (5002) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 19:33:59 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x111e0b4, &(0x7f0000000040)={[{@nombcache}]}) 19:33:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, @nl=@unspec, @nfc}) 19:33:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 19:33:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 4: syz_io_uring_setup(0x28a0, &(0x7f0000000300), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 19:33:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5581, 0x4) 19:33:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, @nl=@unspec, @nfc}) 19:33:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x2c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 76.135299][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 76.135311][ T22] audit: type=1400 audit(1634844839.712:171): avc: denied { remount } for pid=5016 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.139769][ T5017] EXT4-fs (sda1): can't enable nombcache during remount 19:33:59 executing program 4: syz_io_uring_setup(0x28a0, &(0x7f0000000300), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 19:33:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, @nl=@unspec, @nfc}) 19:33:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x2c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5581, 0x4) 19:33:59 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x111e0b4, &(0x7f0000000040)={[{@nombcache}]}) 19:33:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x2c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5581, 0x4) 19:33:59 executing program 4: syz_io_uring_setup(0x28a0, &(0x7f0000000300), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 19:33:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "1c5800"}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:33:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5581, 0x4) [ 76.290735][ T5040] EXT4-fs (sda1): can't enable nombcache during remount 19:33:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x2c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:33:59 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}]}) 19:33:59 executing program 5: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x7f}) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 19:33:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "1c5800"}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 76.354134][ T5054] EXT4-fs (sda1): can't enable nombcache during remount [ 76.392408][ T5059] loop4: detected capacity change from 0 to 6 19:34:00 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5f14fe01b2a4a29093020604dffffffe020805040d3900090035000c020100000901000b40060c1001020022dc1338d54404139b84136ef75afb83de4404000500", 0x48}, {&(0x7f0000000180)="73005000d612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:00 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x111e0b4, &(0x7f0000000040)={[{@nombcache}]}) 19:34:00 executing program 5: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x7f}) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 19:34:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "1c5800"}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000000000002000000000000000000082000000000014000000000000002080"]}, @devid}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 76.410766][ T5059] FAT-fs (loop4): Directory bread(block 6) failed 19:34:00 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5f14fe01b2a4a29093020604dffffffe020805040d3900090035000c020100000901000b40060c1001020022dc1338d54404139b84136ef75afb83de4404000500", 0x48}, {&(0x7f0000000180)="73005000d612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:00 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}]}) 19:34:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000000000002000000000000000000082000000000014000000000000002080"]}, @devid}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "1c5800"}) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 5: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x7f}) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) [ 76.461247][ T5070] EXT4-fs (sda1): can't enable nombcache during remount 19:34:00 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5f14fe01b2a4a29093020604dffffffe020805040d3900090035000c020100000901000b40060c1001020022dc1338d54404139b84136ef75afb83de4404000500", 0x48}, {&(0x7f0000000180)="73005000d612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:00 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x111e0b4, &(0x7f0000000040)={[{@nombcache}]}) 19:34:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000000000002000000000000000000082000000000014000000000000002080"]}, @devid}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:00 executing program 2: r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000840000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140), 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 5: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x7f}) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) [ 76.545272][ T5084] loop4: detected capacity change from 0 to 6 [ 76.556071][ T5088] EXT4-fs (sda1): can't enable nombcache during remount 19:34:00 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5f14fe01b2a4a29093020604dffffffe020805040d3900090035000c020100000901000b40060c1001020022dc1338d54404139b84136ef75afb83de4404000500", 0x48}, {&(0x7f0000000180)="73005000d612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 19:34:00 executing program 2: r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000840000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140), 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) [ 76.587643][ T5084] FAT-fs (loop4): Directory bread(block 6) failed 19:34:00 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) 19:34:00 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}]}) 19:34:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000000000002000000000000000000082000000000014000000000000002080"]}, @devid}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) [ 76.677960][ T22] audit: type=1400 audit(1634844840.262:172): avc: denied { getopt } for pid=5100 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 19:34:00 executing program 2: r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000840000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140), 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) 19:34:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:00 executing program 1: socketpair(0x5, 0x6, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="018e1569a49e2df40baf7aa6b3cef5d18a49621ac43d848aba1ee5a290e14fed5941a850d5b52e2a94fbefc1aafc733db8df2a915f656fe0950d3cd2390d7302039f0ad8f63d867102408f78a045f40e2174943ccad265cac3c5050f6fb4b0e3c1b9f1f3100e06c87bfcddcfb05959b92b12e142c5a1a0a3d2b583d727a789ee3365aaa698b90ad418d506964597e92c6ad00f67dbfe78444b802efe70b1fac17741632b4fba6098eb80ab0028cdc13e"], 0x191) r4 = getuid() keyctl$chown(0x4, 0x0, r4, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x132090, &(0x7f00000002c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r4}}, {@cache_fscache}, {@cache_loose}, {@posixacl}, {@access_client}], [{@subj_user={'subj_user', 0x3d, 'veth0_to_bond\x00'}}, {@hash}, {@audit}, {@dont_appraise}]}}) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', 0x3}, 0x18) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001ec0)={r5, 0x2, 0x6d, 0x4}) recvfrom$packet(r6, &(0x7f0000001f00)=""/65, 0x41, 0x40000022, &(0x7f0000001f80)={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 19:34:00 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) [ 76.719082][ T5111] loop4: detected capacity change from 0 to 6 [ 76.742978][ T5111] FAT-fs (loop4): Directory bread(block 6) failed 19:34:00 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}]}) 19:34:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 19:34:00 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) 19:34:00 executing program 2: r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000840000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140), 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 76.781283][ T22] audit: type=1400 audit(1634844840.362:173): avc: denied { create } for pid=5120 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 19:34:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 19:34:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 19:34:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x41080, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@journal_async_commit}]}) [ 76.838417][ T5130] loop4: detected capacity change from 0 to 6 [ 76.867730][ T5130] FAT-fs (loop4): Directory bread(block 6) failed 19:34:00 executing program 1: socketpair(0x5, 0x6, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="018e1569a49e2df40baf7aa6b3cef5d18a49621ac43d848aba1ee5a290e14fed5941a850d5b52e2a94fbefc1aafc733db8df2a915f656fe0950d3cd2390d7302039f0ad8f63d867102408f78a045f40e2174943ccad265cac3c5050f6fb4b0e3c1b9f1f3100e06c87bfcddcfb05959b92b12e142c5a1a0a3d2b583d727a789ee3365aaa698b90ad418d506964597e92c6ad00f67dbfe78444b802efe70b1fac17741632b4fba6098eb80ab0028cdc13e"], 0x191) r4 = getuid() keyctl$chown(0x4, 0x0, r4, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x132090, &(0x7f00000002c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r4}}, {@cache_fscache}, {@cache_loose}, {@posixacl}, {@access_client}], [{@subj_user={'subj_user', 0x3d, 'veth0_to_bond\x00'}}, {@hash}, {@audit}, {@dont_appraise}]}}) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', 0x3}, 0x18) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001ec0)={r5, 0x2, 0x6d, 0x4}) recvfrom$packet(r6, &(0x7f0000001f00)=""/65, 0x41, 0x40000022, &(0x7f0000001f80)={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 19:34:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:00 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000141, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40442) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff002e67598323c6470765bab9f2c03ee9285abc230fa6960454a7b68aa76020dfba23c0fd4a93fc01fcffffffffffff"], 0x1778) 19:34:00 executing program 1: socketpair(0x5, 0x6, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="018e1569a49e2df40baf7aa6b3cef5d18a49621ac43d848aba1ee5a290e14fed5941a850d5b52e2a94fbefc1aafc733db8df2a915f656fe0950d3cd2390d7302039f0ad8f63d867102408f78a045f40e2174943ccad265cac3c5050f6fb4b0e3c1b9f1f3100e06c87bfcddcfb05959b92b12e142c5a1a0a3d2b583d727a789ee3365aaa698b90ad418d506964597e92c6ad00f67dbfe78444b802efe70b1fac17741632b4fba6098eb80ab0028cdc13e"], 0x191) r4 = getuid() keyctl$chown(0x4, 0x0, r4, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x132090, &(0x7f00000002c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r4}}, {@cache_fscache}, {@cache_loose}, {@posixacl}, {@access_client}], [{@subj_user={'subj_user', 0x3d, 'veth0_to_bond\x00'}}, {@hash}, {@audit}, {@dont_appraise}]}}) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', 0x3}, 0x18) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001ec0)={r5, 0x2, 0x6d, 0x4}) recvfrom$packet(r6, &(0x7f0000001f00)=""/65, 0x41, 0x40000022, &(0x7f0000001f80)={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 19:34:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 19:34:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000100)={{0x80}, {}, 0x1}) [ 76.930262][ T5146] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode [ 76.968381][ T5153] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:34:00 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000141, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000100)={{0x80}, {}, 0x1}) 19:34:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40442) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff002e67598323c6470765bab9f2c03ee9285abc230fa6960454a7b68aa76020dfba23c0fd4a93fc01fcffffffffffff"], 0x1778) 19:34:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 19:34:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x41080, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@journal_async_commit}]}) 19:34:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40442) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff002e67598323c6470765bab9f2c03ee9285abc230fa6960454a7b68aa76020dfba23c0fd4a93fc01fcffffffffffff"], 0x1778) 19:34:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000100)={{0x80}, {}, 0x1}) 19:34:00 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000141, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 1: socketpair(0x5, 0x6, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="018e1569a49e2df40baf7aa6b3cef5d18a49621ac43d848aba1ee5a290e14fed5941a850d5b52e2a94fbefc1aafc733db8df2a915f656fe0950d3cd2390d7302039f0ad8f63d867102408f78a045f40e2174943ccad265cac3c5050f6fb4b0e3c1b9f1f3100e06c87bfcddcfb05959b92b12e142c5a1a0a3d2b583d727a789ee3365aaa698b90ad418d506964597e92c6ad00f67dbfe78444b802efe70b1fac17741632b4fba6098eb80ab0028cdc13e"], 0x191) r4 = getuid() keyctl$chown(0x4, 0x0, r4, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x132090, &(0x7f00000002c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r4}}, {@cache_fscache}, {@cache_loose}, {@posixacl}, {@access_client}], [{@subj_user={'subj_user', 0x3d, 'veth0_to_bond\x00'}}, {@hash}, {@audit}, {@dont_appraise}]}}) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', 0x3}, 0x18) close(r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001ec0)={r5, 0x2, 0x6d, 0x4}) recvfrom$packet(r6, &(0x7f0000001f00)=""/65, 0x41, 0x40000022, &(0x7f0000001f80)={0x11, 0xd, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) 19:34:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 19:34:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40442) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff002e67598323c6470765bab9f2c03ee9285abc230fa6960454a7b68aa76020dfba23c0fd4a93fc01fcffffffffffff"], 0x1778) [ 77.107670][ T5179] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:34:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0x53e8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 19:34:00 executing program 4: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000141, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000100)={{0x80}, {}, 0x1}) 19:34:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x41080, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@journal_async_commit}]}) 19:34:00 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) 19:34:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000000)="53000000fcffffff02040003000020001002002000008bd1efdf36b0f06200000000000069ff6414cb101005820dbbb6354982a690c409c6e98e9706c504cf550bd8a4de723ca3283a68716eaaf4c4568e907648dec6b1c4", 0x58}], 0x2) 19:34:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:34:00 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) [ 77.204799][ T5195] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode [ 77.221194][ T22] audit: type=1400 audit(1634844840.802:174): avc: denied { write } for pid=5194 comm="syz-executor.3" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 19:34:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) 19:34:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0x53e8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 19:34:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x41080, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@journal_async_commit}]}) 19:34:00 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) 19:34:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000000)="53000000fcffffff02040003000020001002002000008bd1efdf36b0f06200000000000069ff6414cb101005820dbbb6354982a690c409c6e98e9706c504cf550bd8a4de723ca3283a68716eaaf4c4568e907648dec6b1c4", 0x58}], 0x2) [ 77.294293][ T22] audit: type=1400 audit(1634844840.862:175): avc: denied { write } for pid=5205 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.318310][ T22] audit: type=1400 audit(1634844840.872:176): avc: denied { name_bind } for pid=5207 comm="syz-executor.5" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 19:34:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:34:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0x53e8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 19:34:00 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) [ 77.362467][ T5219] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:34:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000000)="53000000fcffffff02040003000020001002002000008bd1efdf36b0f06200000000000069ff6414cb101005820dbbb6354982a690c409c6e98e9706c504cf550bd8a4de723ca3283a68716eaaf4c4568e907648dec6b1c4", 0x58}], 0x2) 19:34:01 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:01 executing program 2: io_setup(0x800, &(0x7f00000003c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) io_submit(r0, 0x1, &(0x7f0000003640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:34:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:34:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='4', 0xfdef}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) 19:34:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000000)="53000000fcffffff02040003000020001002002000008bd1efdf36b0f06200000000000069ff6414cb101005820dbbb6354982a690c409c6e98e9706c504cf550bd8a4de723ca3283a68716eaaf4c4568e907648dec6b1c4", 0x58}], 0x2) 19:34:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r1 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0x53e8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 19:34:01 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:34:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='4', 0xfdef}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) 19:34:01 executing program 0: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, 0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000004, 0x0) 19:34:01 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x24000, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 19:34:01 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) 19:34:01 executing program 2: io_setup(0x800, &(0x7f00000003c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) io_submit(r0, 0x1, &(0x7f0000003640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:34:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0x0) 19:34:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='4', 0xfdef}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) [ 77.601881][ T5257] loop3: detected capacity change from 0 to 264192 19:34:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='4', 0xfdef}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) [ 77.635259][ T22] audit: type=1326 audit(1634844841.212:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 77.659210][ T22] audit: type=1326 audit(1634844841.212:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000040)={0x214, 0x19, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="7ecc16dcf74f252081b01a8de5e587ce2112bf0ecef0ccda814e3057387196aaf611c6c4dd359ab761d5d1c8cc37546f36d8b59314e58c9e4dd891ec0c", @generic="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", @generic="2a150ce4f2b1f97659826a9b9df4abc71b1638c2f6267eb56c497d4f67f4ac5d3f6d83d7514f87e94aa009389b00f086d261469e81c2600c8254d8300d4c463cf0940cca5e8b35dffb1c3cea74ed3d0c8d1f6266627332a5a1f63312a28f28020f21426a03f4a40b24f890f6e5384509467aa0d31970fac9d7bd7a58f45987c9f73095b395adaf4225b7cb3e7232a0b20398512a828866104f83fb434d1654bdb42686"]}]}, 0x214}], 0x1}, 0x0) 19:34:01 executing program 0: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, 0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000004, 0x0) 19:34:01 executing program 1: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000008540)=[{&(0x7f0000004a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f00000085c0)={0x14, 0x12, 0x507, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) [ 77.683213][ T22] audit: type=1326 audit(1634844841.212:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 77.707122][ T22] audit: type=1326 audit(1634844841.212:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 77.736260][ T5271] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:01 executing program 2: io_setup(0x800, &(0x7f00000003c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) io_submit(r0, 0x1, &(0x7f0000003640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:34:01 executing program 0: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, 0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000004, 0x0) [ 77.751277][ T5257] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:34:01 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x24000, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 19:34:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000008540)=[{&(0x7f0000004a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f00000085c0)={0x14, 0x12, 0x507, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) 19:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000040)={0x214, 0x19, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="7ecc16dcf74f252081b01a8de5e587ce2112bf0ecef0ccda814e3057387196aaf611c6c4dd359ab761d5d1c8cc37546f36d8b59314e58c9e4dd891ec0c", @generic="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", @generic="2a150ce4f2b1f97659826a9b9df4abc71b1638c2f6267eb56c497d4f67f4ac5d3f6d83d7514f87e94aa009389b00f086d261469e81c2600c8254d8300d4c463cf0940cca5e8b35dffb1c3cea74ed3d0c8d1f6266627332a5a1f63312a28f28020f21426a03f4a40b24f890f6e5384509467aa0d31970fac9d7bd7a58f45987c9f73095b395adaf4225b7cb3e7232a0b20398512a828866104f83fb434d1654bdb42686"]}]}, 0x214}], 0x1}, 0x0) 19:34:01 executing program 0: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, 0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000004, 0x0) 19:34:01 executing program 2: io_setup(0x800, &(0x7f00000003c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) io_submit(r0, 0x1, &(0x7f0000003640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:34:01 executing program 1: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000040)={0x214, 0x19, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="7ecc16dcf74f252081b01a8de5e587ce2112bf0ecef0ccda814e3057387196aaf611c6c4dd359ab761d5d1c8cc37546f36d8b59314e58c9e4dd891ec0c", @generic="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", @generic="2a150ce4f2b1f97659826a9b9df4abc71b1638c2f6267eb56c497d4f67f4ac5d3f6d83d7514f87e94aa009389b00f086d261469e81c2600c8254d8300d4c463cf0940cca5e8b35dffb1c3cea74ed3d0c8d1f6266627332a5a1f63312a28f28020f21426a03f4a40b24f890f6e5384509467aa0d31970fac9d7bd7a58f45987c9f73095b395adaf4225b7cb3e7232a0b20398512a828866104f83fb434d1654bdb42686"]}]}, 0x214}], 0x1}, 0x0) 19:34:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000008540)=[{&(0x7f0000004a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f00000085c0)={0x14, 0x12, 0x507, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) 19:34:01 executing program 0: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000008540)=[{&(0x7f0000004a40)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, 0x28}, {&(0x7f00000085c0)={0x14, 0x12, 0x507, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x2}, 0x0) [ 77.944789][ T5291] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.5'. [ 77.976580][ T5295] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:01 executing program 2: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000040)={0x214, 0x19, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="7ecc16dcf74f252081b01a8de5e587ce2112bf0ecef0ccda814e3057387196aaf611c6c4dd359ab761d5d1c8cc37546f36d8b59314e58c9e4dd891ec0c", @generic="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", @generic="2a150ce4f2b1f97659826a9b9df4abc71b1638c2f6267eb56c497d4f67f4ac5d3f6d83d7514f87e94aa009389b00f086d261469e81c2600c8254d8300d4c463cf0940cca5e8b35dffb1c3cea74ed3d0c8d1f6266627332a5a1f63312a28f28020f21426a03f4a40b24f890f6e5384509467aa0d31970fac9d7bd7a58f45987c9f73095b395adaf4225b7cb3e7232a0b20398512a828866104f83fb434d1654bdb42686"]}]}, 0x214}], 0x1}, 0x0) [ 78.015168][ T5301] loop3: detected capacity change from 0 to 264192 [ 78.066831][ T5301] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 78.082355][ T5308] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:01 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x24000, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 19:34:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) 19:34:01 executing program 0: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) 19:34:01 executing program 1: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) 19:34:01 executing program 0: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) [ 78.158521][ T2562] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:34:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) 19:34:01 executing program 2: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) [ 78.237550][ T5324] loop3: detected capacity change from 0 to 264192 19:34:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) 19:34:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) [ 78.283994][ T5324] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:34:01 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x24000, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40d09) 19:34:01 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x32, 0x0, 0x0) 19:34:01 executing program 1: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) [ 78.380082][ T51] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 78.451625][ T5343] loop3: detected capacity change from 0 to 264192 [ 78.459292][ T5343] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 78.497797][ T51] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:34:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x32, 0x0, 0x0) 19:34:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x383f86aa1e00d8f7, 0x0, 0x0}) 19:34:02 executing program 2: io_setup(0xb950, &(0x7f00000000c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_destroy(r0) 19:34:02 executing program 3: mq_unlink(&(0x7f00000002c0)='_\'\x85(\x91\xb8V\xf7\x80\x18\x99pGY\x86~I\xc7I\x9d\xa1\xdd@X\x0e6$+\xa7`pu\xa0.|\x02hOR\xd3\xf3\x1fK\x0f?N\xf0\x11\"=\n\xa5\x02\x17:\xb7\xc7\xaa\xb9\xc3\xe8a\xc0\x1f~\x01\xa4\xe6P\xed\x12y7l\xc4yT\x14\xe5Q\xa1\xf8Kh\x10\x05\xd5r\xed+\x9a\xd8m\x82t\xf0\xc0\xc9m\x885)\xe4m|b\xa7]N\xc9\xcd\xb7JL#\x93\xfe\xfa\xb7\xc7\b.E`Q|*{,\xb4\xdd\xdds\x84L\xd2\'i0_\t\xef\'\a1*\x0fi5\x88\xb4\x17$\xfd\t\xdfh\"C1Vm0D\xfb\n\xa8\xea\xc7\xe7\xeb\xc7\xee\xe94!\xc9\xb0\x8a\xf6]\x9f#\xf1\xc1\x01~Jh\xeahE\xc2\xd8&\x93\\p\x88\x95\xb3\xc2\x92\x0e\xf4\xd1\x066\x8c4`d\x8a\r\xff\xdd\xbf(fe\xc1\xca\xbbr6\x9c3\x0f|\rH\v\xe4\xa0\xcc}\xdf\x88\x9er\xa2\xf3\xcf\xfd\xcfX\x9e\x1e1\xd7\f\t\x92\xda\xcd:\xa6\xa8\'p\xe5\xee\xc2\xb6ov\xb6\x0f%\"]t*)nl\xc4\x1c\x89\x17>\x18\xc3g\xc8,; \x04\xc5;\x83%\xa6\xbb\x84\xf6\'\xae\xe2\x81?\x13\x14l\xa9\xe3N\x8c\xdemf<\x93\x8c`u2\xf4Z\x96\x1c\xeb]#\x17\x00'/339) 19:34:02 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) 19:34:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x4, 0x19}]}, 0x18}}, 0x0) 19:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034e870325132510000e87032510300000000002e2e202020202020202020100034e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034e870325132510000e870325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) 19:34:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x32, 0x0, 0x0) 19:34:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x4, 0x19}]}, 0x18}}, 0x0) 19:34:02 executing program 3: mq_unlink(&(0x7f00000002c0)='_\'\x85(\x91\xb8V\xf7\x80\x18\x99pGY\x86~I\xc7I\x9d\xa1\xdd@X\x0e6$+\xa7`pu\xa0.|\x02hOR\xd3\xf3\x1fK\x0f?N\xf0\x11\"=\n\xa5\x02\x17:\xb7\xc7\xaa\xb9\xc3\xe8a\xc0\x1f~\x01\xa4\xe6P\xed\x12y7l\xc4yT\x14\xe5Q\xa1\xf8Kh\x10\x05\xd5r\xed+\x9a\xd8m\x82t\xf0\xc0\xc9m\x885)\xe4m|b\xa7]N\xc9\xcd\xb7JL#\x93\xfe\xfa\xb7\xc7\b.E`Q|*{,\xb4\xdd\xdds\x84L\xd2\'i0_\t\xef\'\a1*\x0fi5\x88\xb4\x17$\xfd\t\xdfh\"C1Vm0D\xfb\n\xa8\xea\xc7\xe7\xeb\xc7\xee\xe94!\xc9\xb0\x8a\xf6]\x9f#\xf1\xc1\x01~Jh\xeahE\xc2\xd8&\x93\\p\x88\x95\xb3\xc2\x92\x0e\xf4\xd1\x066\x8c4`d\x8a\r\xff\xdd\xbf(fe\xc1\xca\xbbr6\x9c3\x0f|\rH\v\xe4\xa0\xcc}\xdf\x88\x9er\xa2\xf3\xcf\xfd\xcfX\x9e\x1e1\xd7\f\t\x92\xda\xcd:\xa6\xa8\'p\xe5\xee\xc2\xb6ov\xb6\x0f%\"]t*)nl\xc4\x1c\x89\x17>\x18\xc3g\xc8,; \x04\xc5;\x83%\xa6\xbb\x84\xf6\'\xae\xe2\x81?\x13\x14l\xa9\xe3N\x8c\xdemf<\x93\x8c`u2\xf4Z\x96\x1c\xeb]#\x17\x00'/339) 19:34:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x4, 0x19}]}, 0x18}}, 0x0) 19:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034e870325132510000e87032510300000000002e2e202020202020202020100034e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034e870325132510000e870325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) [ 79.136109][ T5359] loop0: detected capacity change from 0 to 1348 19:34:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x32, 0x0, 0x0) 19:34:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x4, 0x19}]}, 0x18}}, 0x0) 19:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034e870325132510000e87032510300000000002e2e202020202020202020100034e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034e870325132510000e870325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) [ 79.230609][ T5373] loop0: detected capacity change from 0 to 1348 [ 79.345465][ T5377] loop0: detected capacity change from 0 to 1348 19:34:03 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) 19:34:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 19:34:03 executing program 3: mq_unlink(&(0x7f00000002c0)='_\'\x85(\x91\xb8V\xf7\x80\x18\x99pGY\x86~I\xc7I\x9d\xa1\xdd@X\x0e6$+\xa7`pu\xa0.|\x02hOR\xd3\xf3\x1fK\x0f?N\xf0\x11\"=\n\xa5\x02\x17:\xb7\xc7\xaa\xb9\xc3\xe8a\xc0\x1f~\x01\xa4\xe6P\xed\x12y7l\xc4yT\x14\xe5Q\xa1\xf8Kh\x10\x05\xd5r\xed+\x9a\xd8m\x82t\xf0\xc0\xc9m\x885)\xe4m|b\xa7]N\xc9\xcd\xb7JL#\x93\xfe\xfa\xb7\xc7\b.E`Q|*{,\xb4\xdd\xdds\x84L\xd2\'i0_\t\xef\'\a1*\x0fi5\x88\xb4\x17$\xfd\t\xdfh\"C1Vm0D\xfb\n\xa8\xea\xc7\xe7\xeb\xc7\xee\xe94!\xc9\xb0\x8a\xf6]\x9f#\xf1\xc1\x01~Jh\xeahE\xc2\xd8&\x93\\p\x88\x95\xb3\xc2\x92\x0e\xf4\xd1\x066\x8c4`d\x8a\r\xff\xdd\xbf(fe\xc1\xca\xbbr6\x9c3\x0f|\rH\v\xe4\xa0\xcc}\xdf\x88\x9er\xa2\xf3\xcf\xfd\xcfX\x9e\x1e1\xd7\f\t\x92\xda\xcd:\xa6\xa8\'p\xe5\xee\xc2\xb6ov\xb6\x0f%\"]t*)nl\xc4\x1c\x89\x17>\x18\xc3g\xc8,; \x04\xc5;\x83%\xa6\xbb\x84\xf6\'\xae\xe2\x81?\x13\x14l\xa9\xe3N\x8c\xdemf<\x93\x8c`u2\xf4Z\x96\x1c\xeb]#\x17\x00'/339) 19:34:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 19:34:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034e870325132510000e87032510300000000002e2e202020202020202020100034e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034e870325132510000e870325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)) 19:34:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 19:34:03 executing program 3: mq_unlink(&(0x7f00000002c0)='_\'\x85(\x91\xb8V\xf7\x80\x18\x99pGY\x86~I\xc7I\x9d\xa1\xdd@X\x0e6$+\xa7`pu\xa0.|\x02hOR\xd3\xf3\x1fK\x0f?N\xf0\x11\"=\n\xa5\x02\x17:\xb7\xc7\xaa\xb9\xc3\xe8a\xc0\x1f~\x01\xa4\xe6P\xed\x12y7l\xc4yT\x14\xe5Q\xa1\xf8Kh\x10\x05\xd5r\xed+\x9a\xd8m\x82t\xf0\xc0\xc9m\x885)\xe4m|b\xa7]N\xc9\xcd\xb7JL#\x93\xfe\xfa\xb7\xc7\b.E`Q|*{,\xb4\xdd\xdds\x84L\xd2\'i0_\t\xef\'\a1*\x0fi5\x88\xb4\x17$\xfd\t\xdfh\"C1Vm0D\xfb\n\xa8\xea\xc7\xe7\xeb\xc7\xee\xe94!\xc9\xb0\x8a\xf6]\x9f#\xf1\xc1\x01~Jh\xeahE\xc2\xd8&\x93\\p\x88\x95\xb3\xc2\x92\x0e\xf4\xd1\x066\x8c4`d\x8a\r\xff\xdd\xbf(fe\xc1\xca\xbbr6\x9c3\x0f|\rH\v\xe4\xa0\xcc}\xdf\x88\x9er\xa2\xf3\xcf\xfd\xcfX\x9e\x1e1\xd7\f\t\x92\xda\xcd:\xa6\xa8\'p\xe5\xee\xc2\xb6ov\xb6\x0f%\"]t*)nl\xc4\x1c\x89\x17>\x18\xc3g\xc8,; \x04\xc5;\x83%\xa6\xbb\x84\xf6\'\xae\xe2\x81?\x13\x14l\xa9\xe3N\x8c\xdemf<\x93\x8c`u2\xf4Z\x96\x1c\xeb]#\x17\x00'/339) 19:34:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) [ 80.003367][ T5387] loop1: detected capacity change from 0 to 87 [ 80.011881][ T5389] loop0: detected capacity change from 0 to 1348 [ 80.038385][ T5387] attempt to access beyond end of device [ 80.038385][ T5387] loop1: rw=2049, want=230, limit=87 19:34:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 19:34:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:34:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5) ftruncate(r1, 0x1000000) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) [ 80.071935][ T5387] attempt to access beyond end of device [ 80.071935][ T5387] loop1: rw=0, want=126, limit=87 [ 80.104419][ T5387] attempt to access beyond end of device [ 80.104419][ T5387] loop1: rw=524288, want=190, limit=87 [ 80.120317][ T5387] attempt to access beyond end of device [ 80.120317][ T5387] loop1: rw=0, want=120, limit=87 [ 80.130904][ T5387] Buffer I/O error on dev loop1, logical block 59, async page read [ 80.139148][ T5387] attempt to access beyond end of device [ 80.139148][ T5387] loop1: rw=0, want=122, limit=87 [ 80.149689][ T5387] Buffer I/O error on dev loop1, logical block 60, async page read [ 80.158155][ T5387] attempt to access beyond end of device [ 80.158155][ T5387] loop1: rw=0, want=124, limit=87 [ 80.168757][ T5387] Buffer I/O error on dev loop1, logical block 61, async page read [ 80.176704][ T5387] attempt to access beyond end of device [ 80.176704][ T5387] loop1: rw=0, want=126, limit=87 [ 80.187463][ T5387] Buffer I/O error on dev loop1, logical block 62, async page read [ 80.195582][ T5387] attempt to access beyond end of device [ 80.195582][ T5387] loop1: rw=0, want=120, limit=87 [ 80.206214][ T5387] Buffer I/O error on dev loop1, logical block 59, async page read [ 80.214184][ T5387] attempt to access beyond end of device [ 80.214184][ T5387] loop1: rw=0, want=122, limit=87 [ 80.224900][ T5387] Buffer I/O error on dev loop1, logical block 60, async page read [ 80.233458][ T5387] attempt to access beyond end of device [ 80.233458][ T5387] loop1: rw=0, want=124, limit=87 [ 80.243987][ T5387] Buffer I/O error on dev loop1, logical block 61, async page read [ 80.251999][ T5387] Buffer I/O error on dev loop1, logical block 62, async page read [ 80.274535][ T5407] Buffer I/O error on dev loop1, logical block 59, async page read [ 80.282639][ T5407] Buffer I/O error on dev loop1, logical block 60, async page read 19:34:04 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) 19:34:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 19:34:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 19:34:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5) ftruncate(r1, 0x1000000) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 19:34:04 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:34:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) 19:34:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5) ftruncate(r1, 0x1000000) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) [ 80.865992][ T5418] loop1: detected capacity change from 0 to 87 19:34:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:04 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:34:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 80.923963][ T5424] loop4: detected capacity change from 0 to 87 [ 80.985154][ T5433] loop1: detected capacity change from 0 to 87 19:34:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5) ftruncate(r1, 0x1000000) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 19:34:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 19:34:05 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:34:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:34:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:34:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) [ 81.731600][ T5438] loop4: detected capacity change from 0 to 87 [ 81.740466][ T22] kauditd_printk_skb: 14 callbacks suppressed [ 81.740479][ T22] audit: type=1400 audit(1634844845.322:195): avc: denied { setattr } for pid=5441 comm="syz-executor.5" name="seq" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 81.768403][ T5445] loop1: detected capacity change from 0 to 87 19:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 19:34:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x7fff) sendfile(r0, r3, 0x0, 0x8400fffffffa) 19:34:05 executing program 1: clock_settime(0xa, 0x0) 19:34:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000002c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000001c0), 0x7) 19:34:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:34:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 19:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) [ 81.856165][ T5453] loop4: detected capacity change from 0 to 87 [ 81.887886][ T5459] loop0: detected capacity change from 0 to 264192 19:34:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:34:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800e15b, 0x0, "aebb6488c5cd58d28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x22) 19:34:05 executing program 1: clock_settime(0xa, 0x0) 19:34:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000002c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000001c0), 0x7) 19:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 19:34:05 executing program 5: unshare(0x48040480) r0 = syz_io_uring_setup(0x5a98, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x402, 0x82}, 0x0, 0x18}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000000000)=ANY=[], 0x20) 19:34:05 executing program 1: clock_settime(0xa, 0x0) 19:34:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800e15b, 0x0, "aebb6488c5cd58d28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x22) [ 82.026929][ T5478] loop0: detected capacity change from 0 to 264192 19:34:05 executing program 1: clock_settime(0xa, 0x0) 19:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f0000000040)) 19:34:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:05 executing program 5: unshare(0x48040480) r0 = syz_io_uring_setup(0x5a98, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x402, 0x82}, 0x0, 0x18}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000000000)=ANY=[], 0x20) 19:34:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800e15b, 0x0, "aebb6488c5cd58d28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x22) 19:34:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000002c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000001c0), 0x7) 19:34:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06fa5c59d268ef3886cb4c749c12cf53600000000000005cf8818cd77a72aae"}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 19:34:05 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c5b42, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd400016e) pread64(r0, 0x0, 0x0, 0x0) 19:34:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800e15b, 0x0, "aebb6488c5cd58d28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x22) 19:34:05 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 19:34:05 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c5b42, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd400016e) pread64(r0, 0x0, 0x0, 0x0) 19:34:05 executing program 5: unshare(0x48040480) r0 = syz_io_uring_setup(0x5a98, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x402, 0x82}, 0x0, 0x18}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000000000)=ANY=[], 0x20) [ 82.196996][ T5507] loop0: detected capacity change from 0 to 264192 19:34:05 executing program 3: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:34:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 19:34:05 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 19:34:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000002c0)='./file1\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000001c0), 0x7) 19:34:05 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c5b42, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd400016e) pread64(r0, 0x0, 0x0, 0x0) 19:34:05 executing program 3: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:34:05 executing program 5: unshare(0x48040480) r0 = syz_io_uring_setup(0x5a98, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x402, 0x82}, 0x0, 0x18}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0xf, &(0x7f0000000000)=ANY=[], 0x20) 19:34:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000), 0x0) 19:34:05 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 19:34:06 executing program 1: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c5b42, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd400016e) pread64(r0, 0x0, 0x0, 0x0) 19:34:06 executing program 3: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 82.365726][ T5523] loop0: detected capacity change from 0 to 264192 19:34:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b70, 0x0) 19:34:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000), 0x0) 19:34:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 19:34:06 executing program 3: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:34:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000), 0x0) 19:34:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x101, 0x0, 0x0, {{@in=@private}, @in=@local, {@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 19:34:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b70, 0x0) 19:34:06 executing program 3: syz_open_dev$usbmon(&(0x7f0000000880), 0x7ff, 0x1) 19:34:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b70, 0x0) 19:34:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="b560f9e3976f3b0f487839aeda7c81a303c436af3ae1f37aba1de79c1c090020d91fcdc07e01b4b939944fc2bf098f7615e54c5f69d3bfec3dce528827ba637078337fca63bc4006ff7e88153645a143cf498cc2eb320b3782b63a30805349aeb2311c6a9a53e0060c8a693d02ebc8806d6565a47b85883dee2fb054c0654a258057cc6faad5654accac3d45d83832f4d52deffdc3887a519f669fe396bfd48439bcc31d1d7dfb99cd6dd4aee7ce6565adc51acb37c1359e95b7cda3990914500a8cea1e96f736fb50cfe3e74e0144fd64227f0a1ebece079ec50d7bd63fbeeb151e18b649e02a12f74e1c02895514d05f4c1e61bc99f1328bedc2c402", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000), 0x0) 19:34:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x101, 0x0, 0x0, {{@in=@private}, @in=@local, {@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 19:34:06 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:34:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="b560f9e3976f3b0f487839aeda7c81a303c436af3ae1f37aba1de79c1c090020d91fcdc07e01b4b939944fc2bf098f7615e54c5f69d3bfec3dce528827ba637078337fca63bc4006ff7e88153645a143cf498cc2eb320b3782b63a30805349aeb2311c6a9a53e0060c8a693d02ebc8806d6565a47b85883dee2fb054c0654a258057cc6faad5654accac3d45d83832f4d52deffdc3887a519f669fe396bfd48439bcc31d1d7dfb99cd6dd4aee7ce6565adc51acb37c1359e95b7cda3990914500a8cea1e96f736fb50cfe3e74e0144fd64227f0a1ebece079ec50d7bd63fbeeb151e18b649e02a12f74e1c02895514d05f4c1e61bc99f1328bedc2c402", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b70, 0x0) [ 82.673705][ T22] audit: type=1400 audit(1634844846.252:196): avc: denied { read } for pid=5571 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.675317][ T4006] kernel write not supported for file 5571/task/5573/clear_refs (pid: 4006 comm: kworker/0:3) 19:34:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="b560f9e3976f3b0f487839aeda7c81a303c436af3ae1f37aba1de79c1c090020d91fcdc07e01b4b939944fc2bf098f7615e54c5f69d3bfec3dce528827ba637078337fca63bc4006ff7e88153645a143cf498cc2eb320b3782b63a30805349aeb2311c6a9a53e0060c8a693d02ebc8806d6565a47b85883dee2fb054c0654a258057cc6faad5654accac3d45d83832f4d52deffdc3887a519f669fe396bfd48439bcc31d1d7dfb99cd6dd4aee7ce6565adc51acb37c1359e95b7cda3990914500a8cea1e96f736fb50cfe3e74e0144fd64227f0a1ebece079ec50d7bd63fbeeb151e18b649e02a12f74e1c02895514d05f4c1e61bc99f1328bedc2c402", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x101, 0x0, 0x0, {{@in=@private}, @in=@local, {@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 19:34:06 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 82.698020][ T22] audit: type=1400 audit(1634844846.252:197): avc: denied { open } for pid=5571 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.733363][ T22] audit: type=1400 audit(1634844846.252:198): avc: denied { write } for pid=5571 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 19:34:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x101, 0x0, 0x0, {{@in=@private}, @in=@local, {@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 19:34:06 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400004106a4a92d4cc440d0aa0fa667f7a1d300240000032afcff00fedbd880882c73bba6b6a48fb4e6b6943edf250002000006000400000000000600040000000000060003000000000006000300000000005f75b8956ecb3f909afc2797be79d204627c"], 0x34}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4040890) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000018c0)={@empty, @remote}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 19:34:06 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 82.824119][ T4040] kernel write not supported for file 5585/task/5586/clear_refs (pid: 4040 comm: kworker/1:3) 19:34:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x84}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 19:34:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001e40)='i', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\'', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x14f0, 0x805, 0x0, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000980)=0x800, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x101) socket$inet_tcp(0x2, 0x1, 0x0) readlinkat(r1, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000280)="a37a4d9dfe05e10b4aa37dffd6d5ca6e94be624518b2b6750460d94531653b96cd534c355f3c735ab7bccf1e052b0fefb5a4a23cf6f924759f3895975ee476f96bccc5a7ee7d41c6", 0x48}, {&(0x7f0000000780)="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", 0xfd}], 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000000)=""/42, 0x2a}], 0x4, 0x7, 0x3) 19:34:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x3}}}, 0xb8}}, 0x0) 19:34:06 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:34:06 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400004106a4a92d4cc440d0aa0fa667f7a1d300240000032afcff00fedbd880882c73bba6b6a48fb4e6b6943edf250002000006000400000000000600040000000000060003000000000006000300000000005f75b8956ecb3f909afc2797be79d204627c"], 0x34}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4040890) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000018c0)={@empty, @remote}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 19:34:06 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1d, &(0x7f0000000140)="c4ca724e3f4a5d5802005338e386b3fa8b63974fa9a5f9edaae676fe97"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 82.913749][ T4040] kernel write not supported for file 5601/task/5602/clear_refs (pid: 4040 comm: kworker/1:3) [ 82.934484][ T22] audit: type=1400 audit(1634844846.512:199): avc: denied { bind } for pid=5598 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 19:34:06 executing program 4: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000100)) 19:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x84}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 19:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="eb3c8f000000732e66617400020101000240008080f801", 0x72}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) open(0x0, 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 19:34:06 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400004106a4a92d4cc440d0aa0fa667f7a1d300240000032afcff00fedbd880882c73bba6b6a48fb4e6b6943edf250002000006000400000000000600040000000000060003000000000006000300000000005f75b8956ecb3f909afc2797be79d204627c"], 0x34}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4040890) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000018c0)={@empty, @remote}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 19:34:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) [ 83.001885][ T4040] kernel write not supported for file 5616/task/5617/clear_refs (pid: 4040 comm: kworker/1:3) [ 83.038656][ T5624] loop0: detected capacity change from 0 to 16 19:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x84}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 19:34:06 executing program 4: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000100)) 19:34:06 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400004106a4a92d4cc440d0aa0fa667f7a1d300240000032afcff00fedbd880882c73bba6b6a48fb4e6b6943edf250002000006000400000000000600040000000000060003000000000006000300000000005f75b8956ecb3f909afc2797be79d204627c"], 0x34}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4040890) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000018c0)={@empty, @remote}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 19:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="eb3c8f000000732e66617400020101000240008080f801", 0x72}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) open(0x0, 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 19:34:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10", 0x1}]) 19:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {0x84}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [ 83.145992][ T5647] loop0: detected capacity change from 0 to 16 19:34:09 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ff9c, 0x0) write(r2, &(0x7f0000000300)="9a", 0x1) 19:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000040)={0x40}) 19:34:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="eb3c8f000000732e66617400020101000240008080f801", 0x72}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) open(0x0, 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 19:34:09 executing program 4: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000100)) 19:34:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 19:34:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10", 0x1}]) [ 86.005155][ T5653] loop0: detected capacity change from 0 to 16 [ 86.017846][ T22] audit: type=1400 audit(1634844849.602:200): avc: denied { append } for pid=361 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 19:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000040)={0x40}) 19:34:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 19:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000040)={0x40}) 19:34:09 executing program 4: unshare(0x600) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x220) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000100)) 19:34:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="eb3c8f000000732e66617400020101000240008080f801", 0x72}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) open(0x0, 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 19:34:09 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000040)={0x40}) [ 86.039979][ T22] audit: type=1400 audit(1634844849.602:201): avc: denied { open } for pid=361 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.062329][ T22] audit: type=1400 audit(1634844849.602:202): avc: denied { getattr } for pid=361 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.145818][ T5674] loop0: detected capacity change from 0 to 16 19:34:09 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ff9c, 0x0) write(r2, &(0x7f0000000300)="9a", 0x1) 19:34:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 19:34:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 19:34:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10", 0x1}]) 19:34:09 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = memfd_create(&(0x7f00000002c0)='\\\xff\xff\xc8;\xed\x94\x02\x14!A\xd3]=\xa3/\x83mq\xc2a\xe5U\xad\x02\xdad\xe9\\\xff\x04\xc1\xd0\xe8\x12\xce\x19\x92\xe0\x1a\xad\xb0\x861SB\x97\xd0\x88b\xae|&\x1dMz\x14\xa5f\x9c\x04}\x82\xd5\xda8fS\xf7\xb1kDZ\xfc\xa2k\x00\xc1\xabs\xa6\x00\x00\x00\xa6\x1b\xdc2\xbe;\xc3 \xefj\xff4\xa5WZm\xe6-j\xc6C\xa5\x9d\xd8\xd9p\x18Kanp\xcaY\x03\x9b\xeef\xbd\x01\xf9\xd0\xaa \x91\x86$\x95=\x8eDr$\x13\xc0\xfe\x98\xd8\xbe:\x05\xdcV\x9b\xf5;f\x12\xe7\x13`m\x18\xcd\xae\xe7\xb7\xe6k\x0f\xd0\r8\x12n\xc3\x17\xb8U`\x81\xce\xb5|:\xe6RC\x17u\xdfo\xfe\xcd\xa9\x1c\x80?{\xfcs\x03\xb7\xeb\xe0S\xb3\x95~r\x9c\x81\xe4\x9c|\xf4c9\xa1\xb3\x9av\xd2\xd8*\xeb\xb26\xc8\x11\x83\xe3Q\x12l\x88\"\xff\x05\xc4\x8cL\n\x15\xbb\xcah~\xca7-\x90', 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 19:34:09 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = memfd_create(&(0x7f00000002c0)='\\\xff\xff\xc8;\xed\x94\x02\x14!A\xd3]=\xa3/\x83mq\xc2a\xe5U\xad\x02\xdad\xe9\\\xff\x04\xc1\xd0\xe8\x12\xce\x19\x92\xe0\x1a\xad\xb0\x861SB\x97\xd0\x88b\xae|&\x1dMz\x14\xa5f\x9c\x04}\x82\xd5\xda8fS\xf7\xb1kDZ\xfc\xa2k\x00\xc1\xabs\xa6\x00\x00\x00\xa6\x1b\xdc2\xbe;\xc3 \xefj\xff4\xa5WZm\xe6-j\xc6C\xa5\x9d\xd8\xd9p\x18Kanp\xcaY\x03\x9b\xeef\xbd\x01\xf9\xd0\xaa \x91\x86$\x95=\x8eDr$\x13\xc0\xfe\x98\xd8\xbe:\x05\xdcV\x9b\xf5;f\x12\xe7\x13`m\x18\xcd\xae\xe7\xb7\xe6k\x0f\xd0\r8\x12n\xc3\x17\xb8U`\x81\xce\xb5|:\xe6RC\x17u\xdfo\xfe\xcd\xa9\x1c\x80?{\xfcs\x03\xb7\xeb\xe0S\xb3\x95~r\x9c\x81\xe4\x9c|\xf4c9\xa1\xb3\x9av\xd2\xd8*\xeb\xb26\xc8\x11\x83\xe3Q\x12l\x88\"\xff\x05\xc4\x8cL\n\x15\xbb\xcah~\xca7-\x90', 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:09 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = memfd_create(&(0x7f00000002c0)='\\\xff\xff\xc8;\xed\x94\x02\x14!A\xd3]=\xa3/\x83mq\xc2a\xe5U\xad\x02\xdad\xe9\\\xff\x04\xc1\xd0\xe8\x12\xce\x19\x92\xe0\x1a\xad\xb0\x861SB\x97\xd0\x88b\xae|&\x1dMz\x14\xa5f\x9c\x04}\x82\xd5\xda8fS\xf7\xb1kDZ\xfc\xa2k\x00\xc1\xabs\xa6\x00\x00\x00\xa6\x1b\xdc2\xbe;\xc3 \xefj\xff4\xa5WZm\xe6-j\xc6C\xa5\x9d\xd8\xd9p\x18Kanp\xcaY\x03\x9b\xeef\xbd\x01\xf9\xd0\xaa \x91\x86$\x95=\x8eDr$\x13\xc0\xfe\x98\xd8\xbe:\x05\xdcV\x9b\xf5;f\x12\xe7\x13`m\x18\xcd\xae\xe7\xb7\xe6k\x0f\xd0\r8\x12n\xc3\x17\xb8U`\x81\xce\xb5|:\xe6RC\x17u\xdfo\xfe\xcd\xa9\x1c\x80?{\xfcs\x03\xb7\xeb\xe0S\xb3\x95~r\x9c\x81\xe4\x9c|\xf4c9\xa1\xb3\x9av\xd2\xd8*\xeb\xb26\xc8\x11\x83\xe3Q\x12l\x88\"\xff\x05\xc4\x8cL\n\x15\xbb\xcah~\xca7-\x90', 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 19:34:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:09 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ff9c, 0x0) write(r2, &(0x7f0000000300)="9a", 0x1) 19:34:09 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = memfd_create(&(0x7f00000002c0)='\\\xff\xff\xc8;\xed\x94\x02\x14!A\xd3]=\xa3/\x83mq\xc2a\xe5U\xad\x02\xdad\xe9\\\xff\x04\xc1\xd0\xe8\x12\xce\x19\x92\xe0\x1a\xad\xb0\x861SB\x97\xd0\x88b\xae|&\x1dMz\x14\xa5f\x9c\x04}\x82\xd5\xda8fS\xf7\xb1kDZ\xfc\xa2k\x00\xc1\xabs\xa6\x00\x00\x00\xa6\x1b\xdc2\xbe;\xc3 \xefj\xff4\xa5WZm\xe6-j\xc6C\xa5\x9d\xd8\xd9p\x18Kanp\xcaY\x03\x9b\xeef\xbd\x01\xf9\xd0\xaa \x91\x86$\x95=\x8eDr$\x13\xc0\xfe\x98\xd8\xbe:\x05\xdcV\x9b\xf5;f\x12\xe7\x13`m\x18\xcd\xae\xe7\xb7\xe6k\x0f\xd0\r8\x12n\xc3\x17\xb8U`\x81\xce\xb5|:\xe6RC\x17u\xdfo\xfe\xcd\xa9\x1c\x80?{\xfcs\x03\xb7\xeb\xe0S\xb3\x95~r\x9c\x81\xe4\x9c|\xf4c9\xa1\xb3\x9av\xd2\xd8*\xeb\xb26\xc8\x11\x83\xe3Q\x12l\x88\"\xff\x05\xc4\x8cL\n\x15\xbb\xcah~\xca7-\x90', 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 19:34:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 19:34:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="10", 0x1}]) 19:34:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:10 executing program 0: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) getdents64(r0, 0x0, 0x28) 19:34:10 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e661740004e2080a0200027400f8", 0x16}], 0x8100, &(0x7f0000000380)) [ 86.449580][ T22] audit: type=1400 audit(1634844850.032:203): avc: denied { mount } for pid=5719 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 19:34:10 executing program 0: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) getdents64(r0, 0x0, 0x28) 19:34:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 19:34:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:10 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ff9c, 0x0) write(r2, &(0x7f0000000300)="9a", 0x1) 19:34:10 executing program 3: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011000200303030303a30303a31302e300000000008000800000000000e0001006e657464657673696d0000000f0002206e657464657673696d302d000800039d00000000080d050070"], 0x84}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020604dffffffe080e0a04053900090035000a030100000019000b4006271001020022dc1338d54404139b84136ef75afb83de4404000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) [ 86.499176][ T5724] loop5: detected capacity change from 0 to 264192 [ 86.503308][ T22] audit: type=1400 audit(1634844850.072:204): avc: denied { watch } for pid=5719 comm="syz-executor.0" path="/sys/fs/nfs" dev="proc" ino=20203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 19:34:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000140)='d', 0x1) 19:34:10 executing program 0: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) getdents64(r0, 0x0, 0x28) 19:34:10 executing program 3: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011000200303030303a30303a31302e300000000008000800000000000e0001006e657464657673696d0000000f0002206e657464657673696d302d000800039d00000000080d050070"], 0x84}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020604dffffffe080e0a04053900090035000a030100000019000b4006271001020022dc1338d54404139b84136ef75afb83de4404000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:10 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e661740004e2080a0200027400f8", 0x16}], 0x8100, &(0x7f0000000380)) 19:34:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x4d, 0x0, 0x4, "467c684eb14a9ee2e263da3623fc760b0755a29048b6de67637e890a11537b383407387e30dabb5380164ecf2c2c85aadb698d9878d72f443dff4f2243aef7d18e4aa25e0fb006504a2d060875"}) [ 86.560072][ T5724] loop5: detected capacity change from 0 to 264192 [ 86.572356][ T5735] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 86.580559][ T5735] netlink: 61975 bytes leftover after parsing attributes in process `syz-executor.3'. 19:34:10 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 19:34:10 executing program 0: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) getdents64(r0, 0x0, 0x28) 19:34:10 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000190007041dfffd946f610500020003e8fe0208010001080008001200fe7f0000", 0x24}], 0x1}, 0x0) 19:34:10 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e661740004e2080a0200027400f8", 0x16}], 0x8100, &(0x7f0000000380)) 19:34:10 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) [ 86.652363][ T5745] loop5: detected capacity change from 0 to 264192 [ 86.657608][ T5747] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 86.667155][ T5747] netlink: 61975 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.670454][ T5744] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:34:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) [ 86.741808][ T5756] loop5: detected capacity change from 0 to 264192 [ 86.753993][ T22] kauditd_printk_skb: 12 callbacks suppressed [ 86.754005][ T22] audit: type=1326 audit(1634844850.332:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe592fd9a39 code=0x7ffc0000 [ 86.784153][ T22] audit: type=1326 audit(1634844850.342:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.808051][ T22] audit: type=1326 audit(1634844850.342:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.831956][ T22] audit: type=1326 audit(1634844850.342:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.855767][ T22] audit: type=1326 audit(1634844850.342:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.879945][ T22] audit: type=1326 audit(1634844850.342:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.903674][ T22] audit: type=1326 audit(1634844850.342:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 19:34:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 19:34:10 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 19:34:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x4d, 0x0, 0x4, "467c684eb14a9ee2e263da3623fc760b0755a29048b6de67637e890a11537b383407387e30dabb5380164ecf2c2c85aadb698d9878d72f443dff4f2243aef7d18e4aa25e0fb006504a2d060875"}) 19:34:10 executing program 3: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011000200303030303a30303a31302e300000000008000800000000000e0001006e657464657673696d0000000f0002206e657464657673696d302d000800039d00000000080d050070"], 0x84}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020604dffffffe080e0a04053900090035000a030100000019000b4006271001020022dc1338d54404139b84136ef75afb83de4404000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) 19:34:10 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000190007041dfffd946f610500020003e8fe0208010001080008001200fe7f0000", 0x24}], 0x1}, 0x0) 19:34:10 executing program 3: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000a000000080001007063690011000200303030303a30303a31302e300000000008000800000000000e0001006e657464657673696d0000000f0002206e657464657673696d302d000800039d00000000080d050070"], 0x84}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff42, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020604dffffffe080e0a04053900090035000a030100000019000b4006271001020022dc1338d54404139b84136ef75afb83de4404000500", 0xff72}, {&(0x7f0000000040)="7300507ad612110000ff0ea988", 0xd}], 0x2}, 0x0) [ 86.927491][ T22] audit: type=1326 audit(1634844850.342:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93de3aba39 code=0x7ffc0000 [ 86.937274][ T5767] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 86.951354][ T22] audit: type=1326 audit(1634844850.362:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe592fd9a39 code=0x7ffc0000 [ 86.959438][ T5767] netlink: 61975 bytes leftover after parsing attributes in process `syz-executor.3'. 19:34:10 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e661740004e2080a0200027400f8", 0x16}], 0x8100, &(0x7f0000000380)) [ 86.992933][ T22] audit: type=1326 audit(1634844850.362:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe592fd9a39 code=0x7ffc0000 [ 87.000168][ T5773] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 87.025178][ T5773] netlink: 61975 bytes leftover after parsing attributes in process `syz-executor.3'. 19:34:10 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000190007041dfffd946f610500020003e8fe0208010001080008001200fe7f0000", 0x24}], 0x1}, 0x0) [ 87.041833][ T5769] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:34:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 19:34:10 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 19:34:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x4d, 0x0, 0x4, "467c684eb14a9ee2e263da3623fc760b0755a29048b6de67637e890a11537b383407387e30dabb5380164ecf2c2c85aadb698d9878d72f443dff4f2243aef7d18e4aa25e0fb006504a2d060875"}) 19:34:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 19:34:10 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000240)='./file0\x00', 0x0) [ 87.085512][ T5777] loop5: detected capacity change from 0 to 264192 19:34:10 executing program 1: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000190007041dfffd946f610500020003e8fe0208010001080008001200fe7f0000", 0x24}], 0x1}, 0x0) 19:34:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) 19:34:10 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) write(r0, &(0x7f00000000c0)="d2b2e333b0cf91a327b3a5b5", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 19:34:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 19:34:10 executing program 1: r0 = memfd_create(&(0x7f0000000780)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x4) fallocate(r0, 0x0, 0x208042a, 0x1) finit_module(r0, 0x0, 0x0) [ 87.171190][ T5789] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:34:10 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) write(r0, &(0x7f00000000c0)="d2b2e333b0cf91a327b3a5b5", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 19:34:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) 19:34:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 19:34:10 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000240)='./file0\x00', 0x0) 19:34:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x4d, 0x0, 0x4, "467c684eb14a9ee2e263da3623fc760b0755a29048b6de67637e890a11537b383407387e30dabb5380164ecf2c2c85aadb698d9878d72f443dff4f2243aef7d18e4aa25e0fb006504a2d060875"}) 19:34:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) 19:34:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 19:34:10 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000240)='./file0\x00', 0x0) 19:34:10 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) write(r0, &(0x7f00000000c0)="d2b2e333b0cf91a327b3a5b5", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 19:34:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) [ 87.300407][ T5799] Module has invalid ELF structures [ 87.316145][ T5810] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:34:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x7305}, {0x40}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19:34:11 executing program 1: r0 = memfd_create(&(0x7f0000000780)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x4) fallocate(r0, 0x0, 0x208042a, 0x1) finit_module(r0, 0x0, 0x0) 19:34:11 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000240)='./file0\x00', 0x0) 19:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r2, r1, 0x0, 0x80000001) 19:34:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x7305}, {0x40}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19:34:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/}\x00', 0x3, 0x0) 19:34:11 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) write(r0, &(0x7f00000000c0)="d2b2e333b0cf91a327b3a5b5", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') [ 87.410769][ T5815] Module has invalid ELF structures 19:34:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/}\x00', 0x3, 0x0) 19:34:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x7305}, {0x40}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r2, r1, 0x0, 0x80000001) [ 87.485964][ T5831] Module has invalid ELF structures 19:34:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/}\x00', 0x3, 0x0) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, 0x0, 0x0) 19:34:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 1: r0 = memfd_create(&(0x7f0000000780)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x4) fallocate(r0, 0x0, 0x208042a, 0x1) finit_module(r0, 0x0, 0x0) 19:34:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x7305}, {0x40}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r2, r1, 0x0, 0x80000001) 19:34:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/}\x00', 0x3, 0x0) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, 0x0, 0x0) 19:34:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000000)={0x24, 0x76, 0x11b, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xa, 0xd, 0x0, 0x0, @str='+!&-#\x00'}]}]}, 0x24}], 0x1}, 0x0) 19:34:11 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r2, r1, 0x0, 0x80000001) 19:34:11 executing program 0: unshare(0x40040400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x284400, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, 0x0, 0x0) [ 87.656787][ T5849] Module has invalid ELF structures 19:34:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000000)={0x24, 0x76, 0x11b, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xa, 0xd, 0x0, 0x0, @str='+!&-#\x00'}]}]}, 0x24}], 0x1}, 0x0) 19:34:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000000)={0x24, 0x76, 0x11b, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xa, 0xd, 0x0, 0x0, @str='+!&-#\x00'}]}]}, 0x24}], 0x1}, 0x0) 19:34:11 executing program 1: r0 = memfd_create(&(0x7f0000000780)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x4) fallocate(r0, 0x0, 0x208042a, 0x1) finit_module(r0, 0x0, 0x0) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, 0x0, 0x0) 19:34:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000000)={0x24, 0x76, 0x11b, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xa, 0xd, 0x0, 0x0, @str='+!&-#\x00'}]}]}, 0x24}], 0x1}, 0x0) 19:34:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0xa, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="1c", 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) [ 87.886753][ T5894] Module has invalid ELF structures 19:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0xa, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="1c", 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 19:34:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0xa, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="1c", 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 19:34:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @broadcast}, &(0x7f0000000180)=0xc) r4 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00<\xf8\xe0', 0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "b53713e3947de9d4aaf6f05fa4d2b4a1c0855f21c2196e5e711e622fe655bbcf05b2cf31"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80b0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0x42, r1}) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000500)={@remote, 0x50, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4, 0x527, 0x0, 0x0, 0x80080201, r3}) 19:34:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0xa, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="1c", 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 19:34:11 executing program 3: getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 19:34:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xfffffffffffffffc) 19:34:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 19:34:11 executing program 3: getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 1: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 19:34:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 19:34:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xfffffffffffffffc) 19:34:11 executing program 3: getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 19:34:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x9a7, &(0x7f0000000380), &(0x7f0000277000/0x3000)=nil, &(0x7f00001ca000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/198, 0x119, 0x1a5) 19:34:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xfffffffffffffffc) 19:34:11 executing program 3: getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) 19:34:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 19:34:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 19:34:11 executing program 4: semget(0x3, 0x0, 0x0) 19:34:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xfffffffffffffffc) 19:34:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/198, 0x119, 0x1a5) 19:34:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 19:34:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r2, 0x0) dup2(r0, r1) recvfrom$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x20000000) 19:34:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 19:34:12 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000000c0)={0x0, 0xdb2a, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000200)={0x81, 0x0, 0x0, 0x8000, 0x783b, 0xffffff59}) 19:34:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/198, 0x119, 0x1a5) 19:34:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x401}) 19:34:12 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) lseek(r0, 0x8, 0x0) 19:34:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r2, 0x0) dup2(r0, r1) recvfrom$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x20000000) 19:34:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) 19:34:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/198, 0x119, 0x1a5) [ 88.501484][ T6016] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) 19:34:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x401}) 19:34:12 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r2, 0x0) dup2(r0, r1) recvfrom$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x20000000) 19:34:12 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) lseek(r0, 0x8, 0x0) 19:34:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) 19:34:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r2, 0x0) dup2(r0, r1) recvfrom$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x20000000) 19:34:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) [ 88.621966][ T6034] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) 19:34:12 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) lseek(r0, 0x8, 0x0) 19:34:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x401}) 19:34:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) 19:34:12 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) lseek(r0, 0x8, 0x0) 19:34:12 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) [ 88.736474][ T6054] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) 19:34:12 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x401}) 19:34:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 2: timer_create(0x8, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r0}}, &(0x7f00000002c0)) 19:34:12 executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 2: timer_create(0x8, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r0}}, &(0x7f00000002c0)) 19:34:12 executing program 1: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000000)=0xc, 0x4) [ 88.872027][ T6068] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) 19:34:12 executing program 1: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000000)=0xc, 0x4) 19:34:12 executing program 2: timer_create(0x8, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r0}}, &(0x7f00000002c0)) 19:34:12 executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000080)='c\x00\x00\x00\x00\x00\x00', 0x0) 19:34:12 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0xe1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x3, 0x4, 0x10000101) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x3f00, 0x10000101) fallocate(r1, 0x0, 0x0, 0x10000101) 19:34:12 executing program 1: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000000)=0xc, 0x4) 19:34:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "700d18ad16ff3b71b10813f10340bcd7df1aa0"}) 19:34:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x2000fe0f) 19:34:12 executing program 2: timer_create(0x8, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r0}}, &(0x7f00000002c0)) 19:34:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "700d18ad16ff3b71b10813f10340bcd7df1aa0"}) 19:34:12 executing program 1: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000000)=0xc, 0x4) 19:34:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x2000fe0f) 19:34:12 executing program 4: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) syz_io_uring_setup(0x3371, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0x0, 0x0, 0x0) 19:34:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="02010f00000001000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055", 0x3f, 0x1c0}]) 19:34:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 19:34:12 executing program 1: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x401) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x50c1, 0x0, 0x0, 0x0, 0x0) 19:34:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "700d18ad16ff3b71b10813f10340bcd7df1aa0"}) 19:34:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x2000fe0f) 19:34:12 executing program 1: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x401) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x50c1, 0x0, 0x0, 0x0, 0x0) [ 89.146200][ T6110] loop2: detected capacity change from 0 to 1 19:34:12 executing program 1: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x401) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x50c1, 0x0, 0x0, 0x0, 0x0) 19:34:12 executing program 4: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) syz_io_uring_setup(0x3371, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0x0, 0x0, 0x0) 19:34:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x2000fe0f) 19:34:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "700d18ad16ff3b71b10813f10340bcd7df1aa0"}) 19:34:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 19:34:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) [ 89.269060][ T6110] loop2: detected capacity change from 0 to 1 19:34:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="02010f00000001000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055", 0x3f, 0x1c0}]) 19:34:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) r1 = io_uring_setup(0x45db, &(0x7f00000009c0)) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240b0000010200002052caf90000aff0f60efeffffffffffffff962c22772e04000000df0000", 0x2a}], 0x1) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000000680)=""/150, 0x96}], 0x2) 19:34:12 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 19:34:12 executing program 1: r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x401) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x50c1, 0x0, 0x0, 0x0, 0x0) 19:34:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 19:34:12 executing program 4: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) syz_io_uring_setup(0x3371, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0x0, 0x0, 0x0) 19:34:12 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x639, 0x3f) clone3(&(0x7f0000000080)={0x1f0080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x7) 19:34:12 executing program 4: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) syz_io_uring_setup(0x3371, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0x0, 0x0, 0x0) 19:34:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20060020) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) [ 89.361080][ T6142] loop2: detected capacity change from 0 to 1 19:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) r1 = io_uring_setup(0x45db, &(0x7f00000009c0)) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240b0000010200002052caf90000aff0f60efeffffffffffffff962c22772e04000000df0000", 0x2a}], 0x1) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000000680)=""/150, 0x96}], 0x2) 19:34:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)={0x14, 0x43, 0x1, 0x0, 0x0, "", [@generic="96"]}, 0x14}], 0x1}, 0x0) 19:34:13 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x639, 0x3f) clone3(&(0x7f0000000080)={0x1f0080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x7) 19:34:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="02010f00000001000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055", 0x3f, 0x1c0}]) 19:34:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)={0x14, 0x43, 0x1, 0x0, 0x0, "", [@generic="96"]}, 0x14}], 0x1}, 0x0) [ 89.495384][ T6165] loop2: detected capacity change from 0 to 1 19:34:13 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 19:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) r1 = io_uring_setup(0x45db, &(0x7f00000009c0)) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240b0000010200002052caf90000aff0f60efeffffffffffffff962c22772e04000000df0000", 0x2a}], 0x1) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000000680)=""/150, 0x96}], 0x2) 19:34:13 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x639, 0x3f) clone3(&(0x7f0000000080)={0x1f0080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x7) 19:34:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)={0x14, 0x43, 0x1, 0x0, 0x0, "", [@generic="96"]}, 0x14}], 0x1}, 0x0) 19:34:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="02010f00000001000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055", 0x3f, 0x1c0}]) 19:34:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)={0x14, 0x43, 0x1, 0x0, 0x0, "", [@generic="96"]}, 0x14}], 0x1}, 0x0) [ 90.217702][ T6174] loop2: detected capacity change from 0 to 1 19:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) r1 = io_uring_setup(0x45db, &(0x7f00000009c0)) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240b0000010200002052caf90000aff0f60efeffffffffffffff962c22772e04000000df0000", 0x2a}], 0x1) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f0000000680)=""/150, 0x96}], 0x2) 19:34:13 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x639, 0x3f) clone3(&(0x7f0000000080)={0x1f0080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x7) 19:34:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20060020) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 19:34:13 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 19:34:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200), 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) write$binfmt_aout(r1, &(0x7f00000004c0)={{0x8847, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x8035}}, 0x14) 19:34:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200), 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) write$binfmt_aout(r1, &(0x7f00000004c0)={{0x8847, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x8035}}, 0x14) 19:34:14 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 19:34:14 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 19:34:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200), 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) write$binfmt_aout(r1, &(0x7f00000004c0)={{0x8847, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x8035}}, 0x14) 19:34:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0xee, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 19:34:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) 19:34:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0xee, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 19:34:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200), 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) write$binfmt_aout(r1, &(0x7f00000004c0)={{0x8847, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x8035}}, 0x14) 19:34:14 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 19:34:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20060020) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 19:34:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) 19:34:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0xee, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 19:34:14 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 19:34:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) 19:34:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0xee, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 19:34:15 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xec) 19:34:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 19:34:15 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 19:34:15 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xec) 19:34:15 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000001e0007021dfffd946f610500020003e8fe0208010001080008000c000400ff7e", 0x24}], 0x1}, 0x0) 19:34:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) 19:34:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20060020) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 19:34:15 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xec) 19:34:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 19:34:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000001380)={0x1c0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@ht={0x2d, 0x1a}, @channel_switch={0x25, 0x3}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {@wo_ht={{}, {}, @broadcast, @device_b, @random="42ac23ad5f45"}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0xfffffffffffffcc9}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x0, "436ed2640de5", @short="69d8688a59b9e20a"}}]}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]}, 0x1c0}}, 0x0) 19:34:15 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xec) [ 92.033795][ T6243] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 19:34:16 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000001e0007021dfffd946f610500020003e8fe0208010001080008000c000400ff7e", 0x24}], 0x1}, 0x0) 19:34:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 19:34:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5452, 0xffffffffffffffff) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000001380)={0x1c0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@ht={0x2d, 0x1a}, @channel_switch={0x25, 0x3}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {@wo_ht={{}, {}, @broadcast, @device_b, @random="42ac23ad5f45"}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0xfffffffffffffcc9}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x0, "436ed2640de5", @short="69d8688a59b9e20a"}}]}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]}, 0x1c0}}, 0x0) 19:34:16 executing program 3: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000001380)={0x1c0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@ht={0x2d, 0x1a}, @channel_switch={0x25, 0x3}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {@wo_ht={{}, {}, @broadcast, @device_b, @random="42ac23ad5f45"}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0xfffffffffffffcc9}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x0, "436ed2640de5", @short="69d8688a59b9e20a"}}]}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]}, 0x1c0}}, 0x0) 19:34:16 executing program 3: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) [ 92.838037][ T6261] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 19:34:16 executing program 3: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000001380)={0x1c0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@ht={0x2d, 0x1a}, @channel_switch={0x25, 0x3}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {@wo_ht={{}, {}, @broadcast, @device_b, @random="42ac23ad5f45"}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0xfffffffffffffcc9}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x0, "436ed2640de5", @short="69d8688a59b9e20a"}}]}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]}, 0x1c0}}, 0x0) 19:34:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 19:34:16 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000001e0007021dfffd946f610500020003e8fe0208010001080008000c000400ff7e", 0x24}], 0x1}, 0x0) 19:34:16 executing program 1: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5452, 0xffffffffffffffff) 19:34:16 executing program 1: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000001e0007021dfffd946f610500020003e8fe0208010001080008000c000400ff7e", 0x24}], 0x1}, 0x0) 19:34:16 executing program 3: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) [ 92.940266][ T6273] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 19:34:16 executing program 4: r0 = syz_io_uring_setup(0x6578, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 1: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0) 19:34:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5452, 0xffffffffffffffff) 19:34:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) 19:34:16 executing program 4: r0 = syz_io_uring_setup(0x6578, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000380)) dup2(0xffffffffffffffff, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:34:16 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400)) clone3(&(0x7f00000009c0)={0x20000, 0x0, &(0x7f0000000140), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone3(&(0x7f0000000b40)={0x100040000, 0x0, 0x0, &(0x7f0000000a40), {}, 0x0, 0x0, &(0x7f0000000ac0)=""/40, &(0x7f0000000b00)=[0x0, 0x0], 0x2, {r0}}, 0x58) [ 93.043251][ T6290] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 19:34:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5452, 0xffffffffffffffff) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) 19:34:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) 19:34:16 executing program 4: r0 = syz_io_uring_setup(0x6578, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c01", 0x1d, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f", 0x72, 0x8000}], 0x0, &(0x7f0000013a00)) getdents64(r0, &(0x7f0000000040)=""/192, 0xc0) 19:34:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:34:16 executing program 0: r0 = epoll_create(0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) dup2(r1, r0) [ 93.208470][ T6323] loop2: detected capacity change from 0 to 512 19:34:16 executing program 4: r0 = syz_io_uring_setup(0x6578, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 93.248723][ T6323] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:34:16 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000380)) dup2(0xffffffffffffffff, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:34:16 executing program 0: r0 = epoll_create(0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) dup2(r1, r0) 19:34:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c01", 0x1d, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f", 0x72, 0x8000}], 0x0, &(0x7f0000013a00)) getdents64(r0, &(0x7f0000000040)=""/192, 0xc0) 19:34:16 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400)) clone3(&(0x7f00000009c0)={0x20000, 0x0, &(0x7f0000000140), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone3(&(0x7f0000000b40)={0x100040000, 0x0, 0x0, &(0x7f0000000a40), {}, 0x0, 0x0, &(0x7f0000000ac0)=""/40, &(0x7f0000000b00)=[0x0, 0x0], 0x2, {r0}}, 0x58) [ 93.388912][ T6344] loop2: detected capacity change from 0 to 512 [ 93.408098][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 93.408127][ C1] sd 0:0:1:0: tag#6012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 93.424574][ C1] sd 0:0:1:0: tag#6012 CDB: opcode=0xe5 (vendor) 19:34:17 executing program 0: r0 = epoll_create(0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) dup2(r1, r0) 19:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 93.430943][ C1] sd 0:0:1:0: tag#6012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 93.439984][ C1] sd 0:0:1:0: tag#6012 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 93.449157][ C1] sd 0:0:1:0: tag#6012 CDB[20]: ba 19:34:17 executing program 0: r0 = epoll_create(0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) dup2(r1, r0) 19:34:17 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000232) creat(&(0x7f00000000c0)='./file0\x00', 0x0) readv(r0, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/256, 0x100}], 0x1) 19:34:17 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400)) clone3(&(0x7f00000009c0)={0x20000, 0x0, &(0x7f0000000140), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone3(&(0x7f0000000b40)={0x100040000, 0x0, 0x0, &(0x7f0000000a40), {}, 0x0, 0x0, &(0x7f0000000ac0)=""/40, &(0x7f0000000b00)=[0x0, 0x0], 0x2, {r0}}, 0x58) 19:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 93.516370][ T6344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.589966][ C0] sd 0:0:1:0: tag#5952 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 93.599950][ C0] sd 0:0:1:0: tag#5952 CDB: opcode=0xe5 (vendor) [ 93.606290][ C0] sd 0:0:1:0: tag#5952 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 93.615347][ C0] sd 0:0:1:0: tag#5952 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 93.624383][ C0] sd 0:0:1:0: tag#5952 CDB[20]: ba 19:34:17 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000380)) dup2(0xffffffffffffffff, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c01", 0x1d, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f", 0x72, 0x8000}], 0x0, &(0x7f0000013a00)) getdents64(r0, &(0x7f0000000040)=""/192, 0xc0) 19:34:17 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000232) creat(&(0x7f00000000c0)='./file0\x00', 0x0) readv(r0, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/256, 0x100}], 0x1) 19:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:34:17 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000232) creat(&(0x7f00000000c0)='./file0\x00', 0x0) readv(r0, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/256, 0x100}], 0x1) 19:34:17 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0000232) creat(&(0x7f00000000c0)='./file0\x00', 0x0) readv(r0, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/256, 0x100}], 0x1) [ 93.743171][ C1] sd 0:0:1:0: tag#5953 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 93.753028][ C1] sd 0:0:1:0: tag#5953 CDB: opcode=0xe5 (vendor) [ 93.759407][ C1] sd 0:0:1:0: tag#5953 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 93.768453][ C1] sd 0:0:1:0: tag#5953 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 93.777535][ C1] sd 0:0:1:0: tag#5953 CDB[20]: ba [ 93.784362][ T6381] loop2: detected capacity change from 0 to 512 19:34:17 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400)) clone3(&(0x7f00000009c0)={0x20000, 0x0, &(0x7f0000000140), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone3(&(0x7f0000000b40)={0x100040000, 0x0, 0x0, &(0x7f0000000a40), {}, 0x0, 0x0, &(0x7f0000000ac0)=""/40, &(0x7f0000000b00)=[0x0, 0x0], 0x2, {r0}}, 0x58) 19:34:17 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 19:34:17 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) [ 93.855842][ T6381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.940345][ C1] sd 0:0:1:0: tag#5954 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 93.950212][ C1] sd 0:0:1:0: tag#5954 CDB: opcode=0xe5 (vendor) [ 93.956553][ C1] sd 0:0:1:0: tag#5954 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 93.965602][ C1] sd 0:0:1:0: tag#5954 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 93.974652][ C1] sd 0:0:1:0: tag#5954 CDB[20]: ba 19:34:17 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 19:34:17 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000380)) dup2(0xffffffffffffffff, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c01", 0x1d, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008000000000000000500000008", 0x29, 0x4200}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f", 0x72, 0x8000}], 0x0, &(0x7f0000013a00)) getdents64(r0, &(0x7f0000000040)=""/192, 0xc0) 19:34:17 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x84}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 19:34:17 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 0: r0 = memfd_create(&(0x7f00000009c0)='\x00\xac=\x9d\xd2\xee\xbb\x99\x8b\xb8\'\x04-\"\xa6\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11\x93X\xde~\xbe\xcb\xa4O\xf8\xaf\x03\xde\xf8+\x86\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t]\xf3\xbd\xb5\x91Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xe0\xdayMAH\x10|\xe3\xf0\x80\x03\xe4=@\xeb\x1cz*/\x0ejD\x04\x00\x00\x00\x00\x00\x00\x00\x94\x99\xc5d\xe3\xe4\xf3\x90\x11\xc4\xa1\x8d|T3\xf1\xe5\x9d\x15\x1e\x81\x10X\x8a\x9a\xc7\x83\xee\x80\xb1\xa8\xe3>N\xeb\xe5#]\xeaP\x97\xc1?\x8a\x04\x00\x00\x00\x00\x00\xb4cL\xefW\x8d\x05 #K]\xd7-\xf0+\xa5\xcf\xb7)\xbcF\xa6\x94R\x1b\xb2O\xf8\x8au\xa0L-\xf8\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x9fHLr{\x97n\xef\x8f@\x93w\xc9\x1aj[Q;u&|M\x80\x88\a\xb0\xcc\\^\x83\x1f\xfd\x9c\xe8\xb0Y\x9cf\x8f\xe9b\xca\xd8\x97\xf9\xc9\xfe\xaa&\x82IN7\xbd\x17!5u \xdd\x99.\xb5\x10\xf7\x9a~\x9c8Sf7@\xcc\xee\xf9{[\xb9\xb6\xfbB9U\x9b0\xc5)\xa5\x9e\xd7x\xcb\xe7\x88\xc249\xec!\x88I\x10\xb3P2\xe8\xb9\x0eM|\xac\xff\x7f\x00\x00\xa82\x89\xaf\x86\x18\xc7\xffTm\x0e\x8fZb\xd41\xdc1\xcf\x87Y\xa4U\xda\xa5Y\xd6\xd8\xb5h\x89\xd0\xdf\xae\x92\xcb\aC\x8c\x1bX\x11\xcd\xd2(\xed$\xe8n\xa4\xfa\xfb0\"\x1f\x92\x8b\xd3\x82\xe2/A_v\xe4;\xf4\x8b\xd8\xc9\\\x83\xc5\xdf\x92P9\xa0B\x8c!\xad\xac\xb8\xc8\xa1p\xaau\xb7??\x0e\x114\x86\xfc@\xca\xa6\xcb\x86 \xab;\xc8\xc0\f\x03\x8f\xc9\x88\xdac\xe7\b\x1eh\xe0\xf2\xdf\x8e\x99\x98\x85\xe1\x01\x17B)k\x8f9\xe7\x8a\")\xc3\x16\xc6y\x1e\xccG\x06\xa1S\x8b\xdaD!\xb7\xeb\xaf\xc6\xfe\x9c\x13\x8d\xb7Mn\x06\xcb\xf8\xaa\xf0\xaa\x11\x8dN,\x95\xf2\xcan}8\xaf\xc5t)\xc9lq\x97f\xd5\x03\xce80\xb2\xf7\t\xa0@\x04V\xcd5\x9cu\xc0\xde\xd1P\xf7X\xa1\x03\x13]c\xca2IY\xf4\xe2\xe1@&V\xdc\x1fOh\n\x9bF\xc6@\xab\x86\xb7c,K\xc7\xa24\xd4yi\xdd\xe8T\xcf\xf8)\xf1\x1d\xe1\x1b\f\xc7\xee\x04\xf8>\xac\xad9F\r!\x12LvcB\xea \xfb\xa2\xcf\xcd-W\xf4\xf2\x8a\xc1\x82\xb5\xabS;\xc6;\\\xd4\xf8\xbc\xa80\x90\xb8q\xa2\xfcL\x8c\xc1\xe2\x99\xe7\xa4\xe5\x8au\xab\xee\xae\xbd\xdc\xa4\xa5I\xf4B\xcf\xe8v~QF\xd1Uv\xe4\f\xb4\xb4N\x11\x16df\xf2\xe8\xd6\x88\xaa\xd2\xa7\x05\b\xc6\x9ax:\x1f\xa9l\x9b\xac\xf3Z@\xf3U\x10@\nQ\x9b\x1d\xbd\xc9!\xc88\xb9W\xb4L\x12m\xeb\x83\xe9\xa4\fyjA\xe8G\xda\xe0\xcafP|\xf4\x04\x81\x01c\bZB\xdd\x8fb\xb1\xa5i\x84x[@qy)\xed\xe4q\xc5\xb1\x1c\xca3\xcde\xec0\x03\bJ\xf0\xd3\x9f\xea+Y\x17\x83\xd33\xd7\xff\a\xc6\x176:1\xc9mZd\xb0\xe6\x92HH\x19\x80\xf3D\xd5\x9b\xab\"\xc1\x97\x89\xff\x96G\xb6|\x8d\xd1\xf8\x9e\x1a\xff\xbb\x02+\x11\"@\xf1\x81r\x02\xd02M\xf5\x81\xfdRt\xea\xd2\xa1\x9a\x1d\xb6T\x9b', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)) [ 94.085570][ T6407] loop2: detected capacity change from 0 to 512 [ 94.144603][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.165802][ C1] sd 0:0:1:0: tag#5959 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 94.175674][ C1] sd 0:0:1:0: tag#5959 CDB: opcode=0xe5 (vendor) [ 94.182227][ C1] sd 0:0:1:0: tag#5959 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:34:17 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) 19:34:17 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) [ 94.191285][ C1] sd 0:0:1:0: tag#5959 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 94.200319][ C1] sd 0:0:1:0: tag#5959 CDB[20]: ba 19:34:17 executing program 0: r0 = memfd_create(&(0x7f00000009c0)='\x00\xac=\x9d\xd2\xee\xbb\x99\x8b\xb8\'\x04-\"\xa6\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11\x93X\xde~\xbe\xcb\xa4O\xf8\xaf\x03\xde\xf8+\x86\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t]\xf3\xbd\xb5\x91Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xe0\xdayMAH\x10|\xe3\xf0\x80\x03\xe4=@\xeb\x1cz*/\x0ejD\x04\x00\x00\x00\x00\x00\x00\x00\x94\x99\xc5d\xe3\xe4\xf3\x90\x11\xc4\xa1\x8d|T3\xf1\xe5\x9d\x15\x1e\x81\x10X\x8a\x9a\xc7\x83\xee\x80\xb1\xa8\xe3>N\xeb\xe5#]\xeaP\x97\xc1?\x8a\x04\x00\x00\x00\x00\x00\xb4cL\xefW\x8d\x05 #K]\xd7-\xf0+\xa5\xcf\xb7)\xbcF\xa6\x94R\x1b\xb2O\xf8\x8au\xa0L-\xf8\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x9fHLr{\x97n\xef\x8f@\x93w\xc9\x1aj[Q;u&|M\x80\x88\a\xb0\xcc\\^\x83\x1f\xfd\x9c\xe8\xb0Y\x9cf\x8f\xe9b\xca\xd8\x97\xf9\xc9\xfe\xaa&\x82IN7\xbd\x17!5u \xdd\x99.\xb5\x10\xf7\x9a~\x9c8Sf7@\xcc\xee\xf9{[\xb9\xb6\xfbB9U\x9b0\xc5)\xa5\x9e\xd7x\xcb\xe7\x88\xc249\xec!\x88I\x10\xb3P2\xe8\xb9\x0eM|\xac\xff\x7f\x00\x00\xa82\x89\xaf\x86\x18\xc7\xffTm\x0e\x8fZb\xd41\xdc1\xcf\x87Y\xa4U\xda\xa5Y\xd6\xd8\xb5h\x89\xd0\xdf\xae\x92\xcb\aC\x8c\x1bX\x11\xcd\xd2(\xed$\xe8n\xa4\xfa\xfb0\"\x1f\x92\x8b\xd3\x82\xe2/A_v\xe4;\xf4\x8b\xd8\xc9\\\x83\xc5\xdf\x92P9\xa0B\x8c!\xad\xac\xb8\xc8\xa1p\xaau\xb7??\x0e\x114\x86\xfc@\xca\xa6\xcb\x86 \xab;\xc8\xc0\f\x03\x8f\xc9\x88\xdac\xe7\b\x1eh\xe0\xf2\xdf\x8e\x99\x98\x85\xe1\x01\x17B)k\x8f9\xe7\x8a\")\xc3\x16\xc6y\x1e\xccG\x06\xa1S\x8b\xdaD!\xb7\xeb\xaf\xc6\xfe\x9c\x13\x8d\xb7Mn\x06\xcb\xf8\xaa\xf0\xaa\x11\x8dN,\x95\xf2\xcan}8\xaf\xc5t)\xc9lq\x97f\xd5\x03\xce80\xb2\xf7\t\xa0@\x04V\xcd5\x9cu\xc0\xde\xd1P\xf7X\xa1\x03\x13]c\xca2IY\xf4\xe2\xe1@&V\xdc\x1fOh\n\x9bF\xc6@\xab\x86\xb7c,K\xc7\xa24\xd4yi\xdd\xe8T\xcf\xf8)\xf1\x1d\xe1\x1b\f\xc7\xee\x04\xf8>\xac\xad9F\r!\x12LvcB\xea \xfb\xa2\xcf\xcd-W\xf4\xf2\x8a\xc1\x82\xb5\xabS;\xc6;\\\xd4\xf8\xbc\xa80\x90\xb8q\xa2\xfcL\x8c\xc1\xe2\x99\xe7\xa4\xe5\x8au\xab\xee\xae\xbd\xdc\xa4\xa5I\xf4B\xcf\xe8v~QF\xd1Uv\xe4\f\xb4\xb4N\x11\x16df\xf2\xe8\xd6\x88\xaa\xd2\xa7\x05\b\xc6\x9ax:\x1f\xa9l\x9b\xac\xf3Z@\xf3U\x10@\nQ\x9b\x1d\xbd\xc9!\xc88\xb9W\xb4L\x12m\xeb\x83\xe9\xa4\fyjA\xe8G\xda\xe0\xcafP|\xf4\x04\x81\x01c\bZB\xdd\x8fb\xb1\xa5i\x84x[@qy)\xed\xe4q\xc5\xb1\x1c\xca3\xcde\xec0\x03\bJ\xf0\xd3\x9f\xea+Y\x17\x83\xd33\xd7\xff\a\xc6\x176:1\xc9mZd\xb0\xe6\x92HH\x19\x80\xf3D\xd5\x9b\xab\"\xc1\x97\x89\xff\x96G\xb6|\x8d\xd1\xf8\x9e\x1a\xff\xbb\x02+\x11\"@\xf1\x81r\x02\xd02M\xf5\x81\xfdRt\xea\xd2\xa1\x9a\x1d\xb6T\x9b', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:34:17 executing program 3: setreuid(0x0, 0xee00) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 19:34:17 executing program 4: set_mempolicy(0x4003, &(0x7f0000000040)=0xfc4d, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x0) 19:34:17 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004000), 0x80002, 0x0) write$vga_arbiter(r0, &(0x7f0000004040)=@other={'decodes', ' ', 'none'}, 0xd) 19:34:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:17 executing program 0: r0 = memfd_create(&(0x7f00000009c0)='\x00\xac=\x9d\xd2\xee\xbb\x99\x8b\xb8\'\x04-\"\xa6\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11\x93X\xde~\xbe\xcb\xa4O\xf8\xaf\x03\xde\xf8+\x86\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t]\xf3\xbd\xb5\x91Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xe0\xdayMAH\x10|\xe3\xf0\x80\x03\xe4=@\xeb\x1cz*/\x0ejD\x04\x00\x00\x00\x00\x00\x00\x00\x94\x99\xc5d\xe3\xe4\xf3\x90\x11\xc4\xa1\x8d|T3\xf1\xe5\x9d\x15\x1e\x81\x10X\x8a\x9a\xc7\x83\xee\x80\xb1\xa8\xe3>N\xeb\xe5#]\xeaP\x97\xc1?\x8a\x04\x00\x00\x00\x00\x00\xb4cL\xefW\x8d\x05 #K]\xd7-\xf0+\xa5\xcf\xb7)\xbcF\xa6\x94R\x1b\xb2O\xf8\x8au\xa0L-\xf8\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x9fHLr{\x97n\xef\x8f@\x93w\xc9\x1aj[Q;u&|M\x80\x88\a\xb0\xcc\\^\x83\x1f\xfd\x9c\xe8\xb0Y\x9cf\x8f\xe9b\xca\xd8\x97\xf9\xc9\xfe\xaa&\x82IN7\xbd\x17!5u \xdd\x99.\xb5\x10\xf7\x9a~\x9c8Sf7@\xcc\xee\xf9{[\xb9\xb6\xfbB9U\x9b0\xc5)\xa5\x9e\xd7x\xcb\xe7\x88\xc249\xec!\x88I\x10\xb3P2\xe8\xb9\x0eM|\xac\xff\x7f\x00\x00\xa82\x89\xaf\x86\x18\xc7\xffTm\x0e\x8fZb\xd41\xdc1\xcf\x87Y\xa4U\xda\xa5Y\xd6\xd8\xb5h\x89\xd0\xdf\xae\x92\xcb\aC\x8c\x1bX\x11\xcd\xd2(\xed$\xe8n\xa4\xfa\xfb0\"\x1f\x92\x8b\xd3\x82\xe2/A_v\xe4;\xf4\x8b\xd8\xc9\\\x83\xc5\xdf\x92P9\xa0B\x8c!\xad\xac\xb8\xc8\xa1p\xaau\xb7??\x0e\x114\x86\xfc@\xca\xa6\xcb\x86 \xab;\xc8\xc0\f\x03\x8f\xc9\x88\xdac\xe7\b\x1eh\xe0\xf2\xdf\x8e\x99\x98\x85\xe1\x01\x17B)k\x8f9\xe7\x8a\")\xc3\x16\xc6y\x1e\xccG\x06\xa1S\x8b\xdaD!\xb7\xeb\xaf\xc6\xfe\x9c\x13\x8d\xb7Mn\x06\xcb\xf8\xaa\xf0\xaa\x11\x8dN,\x95\xf2\xcan}8\xaf\xc5t)\xc9lq\x97f\xd5\x03\xce80\xb2\xf7\t\xa0@\x04V\xcd5\x9cu\xc0\xde\xd1P\xf7X\xa1\x03\x13]c\xca2IY\xf4\xe2\xe1@&V\xdc\x1fOh\n\x9bF\xc6@\xab\x86\xb7c,K\xc7\xa24\xd4yi\xdd\xe8T\xcf\xf8)\xf1\x1d\xe1\x1b\f\xc7\xee\x04\xf8>\xac\xad9F\r!\x12LvcB\xea \xfb\xa2\xcf\xcd-W\xf4\xf2\x8a\xc1\x82\xb5\xabS;\xc6;\\\xd4\xf8\xbc\xa80\x90\xb8q\xa2\xfcL\x8c\xc1\xe2\x99\xe7\xa4\xe5\x8au\xab\xee\xae\xbd\xdc\xa4\xa5I\xf4B\xcf\xe8v~QF\xd1Uv\xe4\f\xb4\xb4N\x11\x16df\xf2\xe8\xd6\x88\xaa\xd2\xa7\x05\b\xc6\x9ax:\x1f\xa9l\x9b\xac\xf3Z@\xf3U\x10@\nQ\x9b\x1d\xbd\xc9!\xc88\xb9W\xb4L\x12m\xeb\x83\xe9\xa4\fyjA\xe8G\xda\xe0\xcafP|\xf4\x04\x81\x01c\bZB\xdd\x8fb\xb1\xa5i\x84x[@qy)\xed\xe4q\xc5\xb1\x1c\xca3\xcde\xec0\x03\bJ\xf0\xd3\x9f\xea+Y\x17\x83\xd33\xd7\xff\a\xc6\x176:1\xc9mZd\xb0\xe6\x92HH\x19\x80\xf3D\xd5\x9b\xab\"\xc1\x97\x89\xff\x96G\xb6|\x8d\xd1\xf8\x9e\x1a\xff\xbb\x02+\x11\"@\xf1\x81r\x02\xd02M\xf5\x81\xfdRt\xea\xd2\xa1\x9a\x1d\xb6T\x9b', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:34:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=@expire={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in=@empty}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 19:34:17 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:17 executing program 0: r0 = memfd_create(&(0x7f00000009c0)='\x00\xac=\x9d\xd2\xee\xbb\x99\x8b\xb8\'\x04-\"\xa6\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11\x93X\xde~\xbe\xcb\xa4O\xf8\xaf\x03\xde\xf8+\x86\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t]\xf3\xbd\xb5\x91Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xe0\xdayMAH\x10|\xe3\xf0\x80\x03\xe4=@\xeb\x1cz*/\x0ejD\x04\x00\x00\x00\x00\x00\x00\x00\x94\x99\xc5d\xe3\xe4\xf3\x90\x11\xc4\xa1\x8d|T3\xf1\xe5\x9d\x15\x1e\x81\x10X\x8a\x9a\xc7\x83\xee\x80\xb1\xa8\xe3>N\xeb\xe5#]\xeaP\x97\xc1?\x8a\x04\x00\x00\x00\x00\x00\xb4cL\xefW\x8d\x05 #K]\xd7-\xf0+\xa5\xcf\xb7)\xbcF\xa6\x94R\x1b\xb2O\xf8\x8au\xa0L-\xf8\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x9fHLr{\x97n\xef\x8f@\x93w\xc9\x1aj[Q;u&|M\x80\x88\a\xb0\xcc\\^\x83\x1f\xfd\x9c\xe8\xb0Y\x9cf\x8f\xe9b\xca\xd8\x97\xf9\xc9\xfe\xaa&\x82IN7\xbd\x17!5u \xdd\x99.\xb5\x10\xf7\x9a~\x9c8Sf7@\xcc\xee\xf9{[\xb9\xb6\xfbB9U\x9b0\xc5)\xa5\x9e\xd7x\xcb\xe7\x88\xc249\xec!\x88I\x10\xb3P2\xe8\xb9\x0eM|\xac\xff\x7f\x00\x00\xa82\x89\xaf\x86\x18\xc7\xffTm\x0e\x8fZb\xd41\xdc1\xcf\x87Y\xa4U\xda\xa5Y\xd6\xd8\xb5h\x89\xd0\xdf\xae\x92\xcb\aC\x8c\x1bX\x11\xcd\xd2(\xed$\xe8n\xa4\xfa\xfb0\"\x1f\x92\x8b\xd3\x82\xe2/A_v\xe4;\xf4\x8b\xd8\xc9\\\x83\xc5\xdf\x92P9\xa0B\x8c!\xad\xac\xb8\xc8\xa1p\xaau\xb7??\x0e\x114\x86\xfc@\xca\xa6\xcb\x86 \xab;\xc8\xc0\f\x03\x8f\xc9\x88\xdac\xe7\b\x1eh\xe0\xf2\xdf\x8e\x99\x98\x85\xe1\x01\x17B)k\x8f9\xe7\x8a\")\xc3\x16\xc6y\x1e\xccG\x06\xa1S\x8b\xdaD!\xb7\xeb\xaf\xc6\xfe\x9c\x13\x8d\xb7Mn\x06\xcb\xf8\xaa\xf0\xaa\x11\x8dN,\x95\xf2\xcan}8\xaf\xc5t)\xc9lq\x97f\xd5\x03\xce80\xb2\xf7\t\xa0@\x04V\xcd5\x9cu\xc0\xde\xd1P\xf7X\xa1\x03\x13]c\xca2IY\xf4\xe2\xe1@&V\xdc\x1fOh\n\x9bF\xc6@\xab\x86\xb7c,K\xc7\xa24\xd4yi\xdd\xe8T\xcf\xf8)\xf1\x1d\xe1\x1b\f\xc7\xee\x04\xf8>\xac\xad9F\r!\x12LvcB\xea \xfb\xa2\xcf\xcd-W\xf4\xf2\x8a\xc1\x82\xb5\xabS;\xc6;\\\xd4\xf8\xbc\xa80\x90\xb8q\xa2\xfcL\x8c\xc1\xe2\x99\xe7\xa4\xe5\x8au\xab\xee\xae\xbd\xdc\xa4\xa5I\xf4B\xcf\xe8v~QF\xd1Uv\xe4\f\xb4\xb4N\x11\x16df\xf2\xe8\xd6\x88\xaa\xd2\xa7\x05\b\xc6\x9ax:\x1f\xa9l\x9b\xac\xf3Z@\xf3U\x10@\nQ\x9b\x1d\xbd\xc9!\xc88\xb9W\xb4L\x12m\xeb\x83\xe9\xa4\fyjA\xe8G\xda\xe0\xcafP|\xf4\x04\x81\x01c\bZB\xdd\x8fb\xb1\xa5i\x84x[@qy)\xed\xe4q\xc5\xb1\x1c\xca3\xcde\xec0\x03\bJ\xf0\xd3\x9f\xea+Y\x17\x83\xd33\xd7\xff\a\xc6\x176:1\xc9mZd\xb0\xe6\x92HH\x19\x80\xf3D\xd5\x9b\xab\"\xc1\x97\x89\xff\x96G\xb6|\x8d\xd1\xf8\x9e\x1a\xff\xbb\x02+\x11\"@\xf1\x81r\x02\xd02M\xf5\x81\xfdRt\xea\xd2\xa1\x9a\x1d\xb6T\x9b', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:34:17 executing program 4: set_mempolicy(0x4003, &(0x7f0000000040)=0xfc4d, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x0) 19:34:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) [ 94.358327][ T6431] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.385548][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:18 executing program 4: set_mempolicy(0x4003, &(0x7f0000000040)=0xfc4d, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x0) 19:34:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=@expire={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in=@empty}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 19:34:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 94.436793][ T22] kauditd_printk_skb: 39 callbacks suppressed [ 94.436805][ T22] audit: type=1400 audit(1634844858.012:266): avc: denied { block_suspend } for pid=6444 comm="syz-executor.2" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 19:34:18 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=@expire={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in=@empty}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) [ 94.481099][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) 19:34:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 4: set_mempolicy(0x4003, &(0x7f0000000040)=0xfc4d, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x0) [ 94.534673][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=@expire={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in=@empty}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 19:34:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) 19:34:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000003}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x81414, 0x0, 0x0) 19:34:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:18 executing program 5: r0 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 94.624250][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:34:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}) 19:34:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) 19:34:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}) 19:34:18 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x554, &(0x7f0000000440), &(0x7f000011d000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}) 19:34:18 executing program 5: r0 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4246, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 19:34:18 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}) 19:34:18 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x554, &(0x7f0000000440), &(0x7f000011d000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 5: r0 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/174, 0xae) read$rfkill(r0, &(0x7f0000000140), 0x8) 19:34:18 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:34:18 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/174, 0xae) read$rfkill(r0, &(0x7f0000000140), 0x8) 19:34:18 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x554, &(0x7f0000000440), &(0x7f000011d000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 19:34:18 executing program 5: r0 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x25}, {0x6}]}, 0x10) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 94.904103][ T6515] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 94.926867][ T22] audit: type=1400 audit(1634844858.502:267): avc: denied { read } for pid=6516 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.927323][ T6517] Restarting kernel threads ... [ 94.950968][ T22] audit: type=1400 audit(1634844858.502:268): avc: denied { open } for pid=6516 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.979623][ T22] audit: type=1400 audit(1634844858.502:269): avc: denied { ioctl } for pid=6516 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=89 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 19:34:18 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86807000aab087a0200000001480a93210001c0f0020584050060010000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a36313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000080548deac279cc4848e3825924509260e13429fbe11017d", 0xfc) 19:34:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000280)=""/142) 19:34:18 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/174, 0xae) read$rfkill(r0, &(0x7f0000000140), 0x8) [ 95.008131][ T6517] done. [ 95.026772][ T6530] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 95.052885][ T22] audit: type=1326 audit(1634844858.602:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 95.076734][ T22] audit: type=1326 audit(1634844858.602:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:18 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/174, 0xae) read$rfkill(r0, &(0x7f0000000140), 0x8) 19:34:18 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:34:18 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x554, &(0x7f0000000440), &(0x7f000011d000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 19:34:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000280)=""/142) 19:34:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db000800000000000023c26f4595f3e09f8dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f49", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:18 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x42, &(0x7f0000000580)="8d31e183156939000000e28c0b1dd2a357b265c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a91"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x3c) [ 95.100497][ T22] audit: type=1326 audit(1634844858.602:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 95.124523][ T22] audit: type=1326 audit(1634844858.602:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) [ 95.148537][ T22] audit: type=1326 audit(1634844858.602:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 95.187833][ T6539] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 19:34:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000280)=""/142) 19:34:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b6a, 0x0) 19:34:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db000800000000000023c26f4595f3e09f8dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f49", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, &(0x7f0000000000)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [ 95.212842][ T22] audit: type=1326 audit(1634844858.752:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:18 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000280)=""/142) 19:34:18 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:34:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b6a, 0x0) 19:34:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db000800000000000023c26f4595f3e09f8dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f49", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b6a, 0x0) 19:34:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, &(0x7f0000000000)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:34:18 executing program 3: utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={{0x0, 0x3fffffff}}, 0x0) [ 95.296691][ T6561] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 19:34:18 executing program 5: r0 = socket(0x2, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 19:34:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, &(0x7f0000000000)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:34:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x4b6a, 0x0) 19:34:18 executing program 3: utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={{0x0, 0x3fffffff}}, 0x0) 19:34:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db000800000000000023c26f4595f3e09f8dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f49", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:19 executing program 5: r0 = socket(0x2, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 19:34:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, &(0x7f0000000000)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:34:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 19:34:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, 0x0) 19:34:19 executing program 3: utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={{0x0, 0x3fffffff}}, 0x0) 19:34:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 19:34:19 executing program 5: r0 = socket(0x2, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 19:34:19 executing program 2: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f0000000000)="b7c70ff73a") 19:34:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9d574ae376de6e56250c9ac69111eceb09d81f63d60bc194a5c680d64c950a43306dad09f68f3caffcb454993d78b79154c12ab9010cc60893e2a104166870aa7a358edcff4d093b74a70590128142498304012a5a15e0c2cc72c191bb7c58cd3d90bca204cce313b7d0be2cb9b6367b1e5e6ae1a726b3a07117c5d31b7bafbb332209e0a31a58dfef58a7b2ccbcdc8aa7bfcde7ec272da95", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:19 executing program 3: utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={{0x0, 0x3fffffff}}, 0x0) 19:34:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, 0x0) 19:34:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9d574ae376de6e56250c9ac69111eceb09d81f63d60bc194a5c680d64c950a43306dad09f68f3caffcb454993d78b79154c12ab9010cc60893e2a104166870aa7a358edcff4d093b74a70590128142498304012a5a15e0c2cc72c191bb7c58cd3d90bca204cce313b7d0be2cb9b6367b1e5e6ae1a726b3a07117c5d31b7bafbb332209e0a31a58dfef58a7b2ccbcdc8aa7bfcde7ec272da95", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:19 executing program 5: r0 = socket(0x2, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 19:34:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 19:34:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000000)={@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3) 19:34:19 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, 0x0) 19:34:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9d574ae376de6e56250c9ac69111eceb09d81f63d60bc194a5c680d64c950a43306dad09f68f3caffcb454993d78b79154c12ab9010cc60893e2a104166870aa7a358edcff4d093b74a70590128142498304012a5a15e0c2cc72c191bb7c58cd3d90bca204cce313b7d0be2cb9b6367b1e5e6ae1a726b3a07117c5d31b7bafbb332209e0a31a58dfef58a7b2ccbcdc8aa7bfcde7ec272da95", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:19 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:19 executing program 2: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f0000000000)="b7c70ff73a") 19:34:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 19:34:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000839a59434d90a2742a64e000000000000000000deeb14b60028cc7ebdfd74dafc20380003"], 0x3c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45cc46000000f4c9871fa8000000002fea465a50bc300a0000000006"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 19:34:19 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, 0x0) 19:34:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd300677d114b654b494281acb3f456c2889d9abceaa9d574ae376de6e56250c9ac69111eceb09d81f63d60bc194a5c680d64c950a43306dad09f68f3caffcb454993d78b79154c12ab9010cc60893e2a104166870aa7a358edcff4d093b74a70590128142498304012a5a15e0c2cc72c191bb7c58cd3d90bca204cce313b7d0be2cb9b6367b1e5e6ae1a726b3a07117c5d31b7bafbb332209e0a31a58dfef58a7b2ccbcdc8aa7bfcde7ec272da95", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 19:34:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000839a59434d90a2742a64e000000000000000000deeb14b60028cc7ebdfd74dafc20380003"], 0x3c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45cc46000000f4c9871fa8000000002fea465a50bc300a0000000006"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 19:34:19 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:19 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0x2000007f}}, 0x20, 0x0, 0x0) 19:34:19 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 19:34:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8913, &(0x7f0000000140)={'lo\x00'}) 19:34:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000839a59434d90a2742a64e000000000000000000deeb14b60028cc7ebdfd74dafc20380003"], 0x3c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45cc46000000f4c9871fa8000000002fea465a50bc300a0000000006"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 19:34:19 executing program 2: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f0000000000)="b7c70ff73a") 19:34:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x8000001) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0x120) write$binfmt_aout(r0, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x294}, "4aa3", ['\x00']}, 0x122) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) read(r0, &(0x7f0000000000)=""/88, 0x58) 19:34:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) 19:34:19 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0x2000007f}}, 0x20, 0x0, 0x0) 19:34:19 executing program 3: unshare(0x4e020400) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev}, @nl, @phonet, 0x9706}) [ 95.854590][ T6676] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 95.854590][ T6676] program syz-executor.1 not setting count and/or reply_len properly 19:34:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000839a59434d90a2742a64e000000000000000000deeb14b60028cc7ebdfd74dafc20380003"], 0x3c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45cc46000000f4c9871fa8000000002fea465a50bc300a0000000006"], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 19:34:19 executing program 2: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f0000000000)="b7c70ff73a") 19:34:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) 19:34:19 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0x2000007f}}, 0x20, 0x0, 0x0) 19:34:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) 19:34:19 executing program 4: rseq(&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0x2000007f}}, 0x20, 0x0, 0x0) 19:34:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="45b3529ca39e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 95.967984][ T6696] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 95.967984][ T6696] program syz-executor.1 not setting count and/or reply_len properly 19:34:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) 19:34:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x8000001) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0x120) write$binfmt_aout(r0, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x294}, "4aa3", ['\x00']}, 0x122) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) read(r0, &(0x7f0000000000)=""/88, 0x58) 19:34:19 executing program 3: unshare(0x4e020400) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev}, @nl, @phonet, 0x9706}) 19:34:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="45b3529ca39e", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getresuid(0x0, &(0x7f0000000500), &(0x7f0000000540)) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = io_uring_setup(0x48ee, &(0x7f0000000240)={0x0, 0xa02e, 0x2}) syz_mount_image$msdos(0x0, 0x0, 0xcbe, 0x0, &(0x7f00000003c0), 0x8400, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[0x4]}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 19:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "6987589f4685a0a18e46e7f432f890d642d0dc3f9b7e46ae25a33687e7c5fafa112199fc895ac73dee63a2c9c9ab1fd1d73db02f82189cc3d3396c4d46d792"}, 0x80, 0x0}, 0x0) 19:34:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="45b3529ca39e", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x8000001) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0x120) write$binfmt_aout(r0, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x294}, "4aa3", ['\x00']}, 0x122) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) read(r0, &(0x7f0000000000)=""/88, 0x58) 19:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "6987589f4685a0a18e46e7f432f890d642d0dc3f9b7e46ae25a33687e7c5fafa112199fc895ac73dee63a2c9c9ab1fd1d73db02f82189cc3d3396c4d46d792"}, 0x80, 0x0}, 0x0) [ 96.115351][ T6719] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 96.115351][ T6719] program syz-executor.1 not setting count and/or reply_len properly [ 96.138508][ T6718] loop4: detected capacity change from 0 to 6 19:34:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getresuid(0x0, &(0x7f0000000500), &(0x7f0000000540)) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = io_uring_setup(0x48ee, &(0x7f0000000240)={0x0, 0xa02e, 0x2}) syz_mount_image$msdos(0x0, 0x0, 0xcbe, 0x0, &(0x7f00000003c0), 0x8400, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[0x4]}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 19:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "6987589f4685a0a18e46e7f432f890d642d0dc3f9b7e46ae25a33687e7c5fafa112199fc895ac73dee63a2c9c9ab1fd1d73db02f82189cc3d3396c4d46d792"}, 0x80, 0x0}, 0x0) 19:34:19 executing program 3: unshare(0x4e020400) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev}, @nl, @phonet, 0x9706}) 19:34:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="45b3529ca39e", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "6987589f4685a0a18e46e7f432f890d642d0dc3f9b7e46ae25a33687e7c5fafa112199fc895ac73dee63a2c9c9ab1fd1d73db02f82189cc3d3396c4d46d792"}, 0x80, 0x0}, 0x0) [ 96.220401][ T6733] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 96.220401][ T6733] program syz-executor.1 not setting count and/or reply_len properly [ 96.249748][ T6735] loop4: detected capacity change from 0 to 6 19:34:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getresuid(0x0, &(0x7f0000000500), &(0x7f0000000540)) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = io_uring_setup(0x48ee, &(0x7f0000000240)={0x0, 0xa02e, 0x2}) syz_mount_image$msdos(0x0, 0x0, 0xcbe, 0x0, &(0x7f00000003c0), 0x8400, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[0x4]}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 19:34:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x8000001) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0x120) write$binfmt_aout(r0, &(0x7f0000001840)={{0x0, 0x0, 0x0, 0x0, 0x294}, "4aa3", ['\x00']}, 0x122) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) read(r0, &(0x7f0000000000)=""/88, 0x58) 19:34:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:19 executing program 0: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x9, 0x0, 0x0, 0x5eaece0e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='&^^*-\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10f2c2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) 19:34:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:19 executing program 3: unshare(0x4e020400) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev}, @nl, @phonet, 0x9706}) [ 96.354932][ T6752] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 96.354932][ T6752] program syz-executor.1 not setting count and/or reply_len properly 19:34:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 19:34:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) [ 96.402421][ T6757] loop4: detected capacity change from 0 to 6 19:34:20 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{}, {}, {}, {r0}], 0x36, 0x0, 0x0, 0xfffffffffffffd74) 19:34:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) close_range(r3, 0xffffffffffffffff, 0x0) 19:34:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 19:34:20 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getresuid(0x0, &(0x7f0000000500), &(0x7f0000000540)) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = io_uring_setup(0x48ee, &(0x7f0000000240)={0x0, 0xa02e, 0x2}) syz_mount_image$msdos(0x0, 0x0, 0xcbe, 0x0, &(0x7f00000003c0), 0x8400, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[0x4]}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 19:34:20 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{}, {}, {}, {r0}], 0x36, 0x0, 0x0, 0xfffffffffffffd74) 19:34:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{}, "97b756e498269663", "2a9e2adedf681ed3ccd5b58994a0d8d7", "57ecf16c", "4e8021aae541c216"}, 0x28) [ 96.618457][ T6778] loop4: detected capacity change from 0 to 6 19:34:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 19:34:20 executing program 5: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 19:34:20 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{}, {}, {}, {r0}], 0x36, 0x0, 0x0, 0xfffffffffffffd74) 19:34:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{}, "97b756e498269663", "2a9e2adedf681ed3ccd5b58994a0d8d7", "57ecf16c", "4e8021aae541c216"}, 0x28) 19:34:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x5400, &(0x7f0000000900)) 19:34:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:34:20 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{}, {}, {}, {r0}], 0x36, 0x0, 0x0, 0xfffffffffffffd74) 19:34:20 executing program 5: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 19:34:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{}, "97b756e498269663", "2a9e2adedf681ed3ccd5b58994a0d8d7", "57ecf16c", "4e8021aae541c216"}, 0x28) 19:34:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 19:34:20 executing program 5: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 97.141784][ T6792] autofs4:pid:6792:autofs_fill_super: called with bogus options 19:34:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{}, "97b756e498269663", "2a9e2adedf681ed3ccd5b58994a0d8d7", "57ecf16c", "4e8021aae541c216"}, 0x28) 19:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 19:34:20 executing program 5: syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 97.188917][ T6792] autofs4:pid:6792:autofs_fill_super: called with bogus options 19:34:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x5400, &(0x7f0000000900)) 19:34:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:34:20 executing program 1: setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9b9, &(0x7f0000000000)) 19:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 19:34:20 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 19:34:20 executing program 5: clock_gettime(0x3, &(0x7f0000000080)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, 0x0}, 0x90) 19:34:20 executing program 1: setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9b9, &(0x7f0000000000)) 19:34:20 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 19:34:20 executing program 5: clock_gettime(0x3, &(0x7f0000000080)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, 0x0}, 0x90) [ 97.295757][ T6818] autofs4:pid:6818:autofs_fill_super: called with bogus options 19:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 19:34:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:34:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x5400, &(0x7f0000000900)) 19:34:20 executing program 1: setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9b9, &(0x7f0000000000)) 19:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 19:34:20 executing program 5: clock_gettime(0x3, &(0x7f0000000080)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, 0x0}, 0x90) 19:34:21 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 19:34:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x5400, &(0x7f0000000900)) 19:34:21 executing program 1: setrlimit(0x9, &(0x7f0000000000)) io_setup(0x9b9, &(0x7f0000000000)) [ 97.403230][ T6837] autofs4:pid:6837:autofs_fill_super: called with bogus options 19:34:21 executing program 5: clock_gettime(0x3, &(0x7f0000000080)) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, 0x0}, 0x90) 19:34:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 19:34:21 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 97.485089][ C1] sd 0:0:1:0: tag#5964 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 97.494954][ C1] sd 0:0:1:0: tag#5964 CDB: opcode=0xe5 (vendor) [ 97.501318][ C1] sd 0:0:1:0: tag#5964 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 97.510369][ C1] sd 0:0:1:0: tag#5964 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 97.519400][ C1] sd 0:0:1:0: tag#5964 CDB[20]: ba 19:34:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, "b404eb3de7a8aa8d7cc41aab9292395dcf1ba1"}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 19:34:21 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") [ 97.540711][ T6856] autofs4:pid:6856:autofs_fill_super: called with bogus options [ 97.562461][ C0] sd 0:0:1:0: tag#5965 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 19:34:21 executing program 4: r0 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x300) [ 97.562499][ C0] sd 0:0:1:0: tag#5965 CDB: opcode=0xe5 (vendor) [ 97.562516][ C0] sd 0:0:1:0: tag#5965 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 97.562536][ C0] sd 0:0:1:0: tag#5965 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 97.562554][ C0] sd 0:0:1:0: tag#5965 CDB[20]: ba [ 97.614745][ C1] sd 0:0:1:0: tag#5966 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 97.614768][ C1] sd 0:0:1:0: tag#5966 CDB: opcode=0xe5 (vendor) [ 97.614784][ C1] sd 0:0:1:0: tag#5966 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 97.614820][ C1] sd 0:0:1:0: tag#5966 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 97.614839][ C1] sd 0:0:1:0: tag#5966 CDB[20]: ba [ 97.624450][ C0] sd 0:0:1:0: tag#5967 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 97.639201][ C1] sd 0:0:1:0: tag#5968 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 97.644248][ C0] sd 0:0:1:0: tag#5967 CDB: opcode=0xe5 (vendor) 19:34:21 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:21 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") [ 97.649365][ C1] sd 0:0:1:0: tag#5968 CDB: opcode=0xe5 (vendor) [ 97.659272][ C0] sd 0:0:1:0: tag#5967 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 97.665596][ C1] sd 0:0:1:0: tag#5968 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 97.674694][ C0] sd 0:0:1:0: tag#5967 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 97.683701][ C1] sd 0:0:1:0: tag#5968 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 97.689015][ C0] sd 0:0:1:0: tag#5967 CDB[20]: ba [ 97.698766][ C1] sd 0:0:1:0: tag#5968 CDB[20]: ba 19:34:21 executing program 5: rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) madvise(&(0x7f00003e1000/0x1000)=nil, 0x1000, 0x4) 19:34:21 executing program 4: r0 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x300) 19:34:21 executing program 4: r0 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x300) 19:34:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c1a6d345c57485a17", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00c400000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000400000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00080000000600110000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 19:34:21 executing program 5: rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) madvise(&(0x7f00003e1000/0x1000)=nil, 0x1000, 0x4) 19:34:21 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:34:21 executing program 4: r0 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x300) 19:34:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="6ec097c02e682cfa91000320027fffffff00"/40, 0x28}, {&(0x7f0000000280)="dcd28870ec67a9ad", 0x8}], 0x2}, 0x0) 19:34:21 executing program 5: rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) madvise(&(0x7f00003e1000/0x1000)=nil, 0x1000, 0x4) 19:34:21 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 19:34:21 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0) 19:34:21 executing program 1: clock_gettime(0x3, &(0x7f00000001c0)) 19:34:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="6ec097c02e682cfa91000320027fffffff00"/40, 0x28}, {&(0x7f0000000280)="dcd28870ec67a9ad", 0x8}], 0x2}, 0x0) 19:34:21 executing program 5: rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) madvise(&(0x7f00003e1000/0x1000)=nil, 0x1000, 0x4) 19:34:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="6ec097c02e682cfa91000320027fffffff00"/40, 0x28}, {&(0x7f0000000280)="dcd28870ec67a9ad", 0x8}], 0x2}, 0x0) 19:34:22 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 19:34:22 executing program 1: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:22 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0) 19:34:22 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="6ec097c02e682cfa91000320027fffffff00"/40, 0x28}, {&(0x7f0000000280)="dcd28870ec67a9ad", 0x8}], 0x2}, 0x0) 19:34:22 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2aaaac7d, &(0x7f0000000040)) 19:34:22 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0) 19:34:22 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:22 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0) 19:34:22 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2aaaac7d, &(0x7f0000000040)) 19:34:22 executing program 1: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:22 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2aaaac7d, &(0x7f0000000040)) 19:34:22 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 19:34:22 executing program 4: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:22 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:23 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:23 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2aaaac7d, &(0x7f0000000040)) 19:34:23 executing program 1: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:23 executing program 4: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:23 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:23 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 19:34:23 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:23 executing program 1: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:23 executing program 4: perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) quotactl(0x400, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="5f763f960235d1dad06f3ec5be64202b3a97b8376449575cecf97338aab00995148f3d9b0c85d5e5869d3a4ed94839c51e099ce5d0d3755b5024cbc6677451") mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}}, 0x0) r1 = io_uring_setup(0x2fb4, &(0x7f0000000440)) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/102384, 0x18ff0}], 0x300) close(0xffffffffffffffff) 19:34:23 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:23 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f0000000080)=@srh, 0x8) 19:34:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f0000000080)=@srh, 0x8) 19:34:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/43, &(0x7f0000000080)=0x2b) 19:34:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cd155d00080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100011e970325132510000e97032510300000000002e2e202020202020202020100011e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200011e970325132510000e970325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) 19:34:24 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:24 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/43, &(0x7f0000000080)=0x2b) 19:34:24 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:24 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000740), 0x0, 0x0) [ 100.631792][ T7010] loop3: detected capacity change from 0 to 128 19:34:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f0000000080)=@srh, 0x8) 19:34:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/43, &(0x7f0000000080)=0x2b) 19:34:24 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 19:34:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="808100009e7b09a0ddf400000100655fddf4005f00000000000001002000000010000800000000000af302000400010006000000000000700200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) [ 100.757746][ T7030] loop3: detected capacity change from 0 to 1024 [ 100.767044][ T7030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 100.783491][ T7030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.789951][ T7030] EXT4-fs error (device loop3): ext4_ext_check_inode:460: inode #3: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 1(1) [ 100.808735][ T7030] EXT4-fs error (device loop3): ext4_quota_enable:6315: comm syz-executor.3: Bad quota inode # 3 [ 100.819831][ T7030] EXT4-fs warning (device loop3): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 100.834001][ T7030] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 100.840697][ T7030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:34:25 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f0000000080)=@srh, 0x8) 19:34:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/43, &(0x7f0000000080)=0x2b) 19:34:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x39, 0x0, 0x0) 19:34:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="808100009e7b09a0ddf400000100655fddf4005f00000000000001002000000010000800000000000af302000400010006000000000000700200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 19:34:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:25 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r1, &(0x7f0000000380)=[{}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:34:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x39, 0x0, 0x0) 19:34:25 executing program 2: r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x130, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002240) [ 101.530779][ T7041] loop3: detected capacity change from 0 to 1024 [ 101.543826][ T7041] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 19:34:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 101.589011][ T7049] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 101.599701][ T7041] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.606730][ T7041] EXT4-fs error (device loop3): ext4_ext_check_inode:460: inode #3: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 1(1) [ 101.625425][ T7041] EXT4-fs error (device loop3): ext4_quota_enable:6315: comm syz-executor.3: Bad quota inode # 3 19:34:25 executing program 2: r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x130, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002240) 19:34:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 101.636290][ T7041] EXT4-fs warning (device loop3): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 101.650462][ T7041] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 101.657143][ T7041] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:34:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:34:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x39, 0x0, 0x0) 19:34:25 executing program 2: r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x130, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002240) 19:34:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="808100009e7b09a0ddf400000100655fddf4005f00000000000001002000000010000800000000000af302000400010006000000000000700200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 19:34:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b44, &(0x7f0000000480)) 19:34:26 executing program 2: r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x130, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40002240) 19:34:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240b0000010200000000aff0f6b78ef7c8962c22772e108cf41bdd0000ffff825bbbfffffffffff00300", 0x2e}, {&(0x7f0000000680)="53000000fcffffff060000200200040000009600000000000000002000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) [ 102.398451][ T7068] loop3: detected capacity change from 0 to 1024 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x100, 0x0) getdents64(r0, 0x0, 0x18) 19:34:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240b0000010200000000aff0f6b78ef7c8962c22772e108cf41bdd0000ffff825bbbfffffffffff00300", 0x2e}, {&(0x7f0000000680)="53000000fcffffff060000200200040000009600000000000000002000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) [ 102.465995][ T7068] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 102.491573][ T7068] EXT4-fs (loop3): orphan cleanup on readonly fs 19:34:26 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @private}}}, 0x108) 19:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x100, 0x0) getdents64(r0, 0x0, 0x18) 19:34:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x39, 0x0, 0x0) [ 102.504922][ T7068] EXT4-fs error (device loop3): ext4_ext_check_inode:460: inode #3: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 1(1) [ 102.538820][ T7068] EXT4-fs error (device loop3): ext4_quota_enable:6315: comm syz-executor.3: Bad quota inode # 3 19:34:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240b0000010200000000aff0f6b78ef7c8962c22772e108cf41bdd0000ffff825bbbfffffffffff00300", 0x2e}, {&(0x7f0000000680)="53000000fcffffff060000200200040000009600000000000000002000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) 19:34:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="808100009e7b09a0ddf400000100655fddf4005f00000000000001002000000010000800000000000af302000400010006000000000000700200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x100, 0x0) getdents64(r0, 0x0, 0x18) 19:34:26 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @private}}}, 0x108) 19:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 102.557250][ T7068] EXT4-fs warning (device loop3): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 102.571312][ T7068] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 102.578027][ T7068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:34:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240b0000010200000000aff0f6b78ef7c8962c22772e108cf41bdd0000ffff825bbbfffffffffff00300", 0x2e}, {&(0x7f0000000680)="53000000fcffffff060000200200040000009600000000000000002000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}], 0x2) 19:34:26 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) lseek(r1, 0x100, 0x0) getdents64(r0, 0x0, 0x18) 19:34:26 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @private}}}, 0x108) 19:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 4: mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) 19:34:26 executing program 4: mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) [ 102.679778][ T7105] loop3: detected capacity change from 0 to 1024 [ 102.710030][ T7105] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 102.756756][ T7105] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.767284][ T7105] EXT4-fs error (device loop3): ext4_ext_check_inode:460: inode #3: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 1(1) [ 102.787989][ T7105] EXT4-fs error (device loop3): ext4_quota_enable:6315: comm syz-executor.3: Bad quota inode # 3 19:34:26 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @private}}}, 0x108) 19:34:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0) lseek(r0, 0x6080, 0x0) 19:34:26 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 4: mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) 19:34:26 executing program 3: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x80040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0xd5b}]}) [ 102.798904][ T7105] EXT4-fs warning (device loop3): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 102.812951][ T7105] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 102.819649][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:34:26 executing program 4: mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) 19:34:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x8, 0x0, 0x20000000) 19:34:26 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) 19:34:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0) lseek(r0, 0x6080, 0x0) 19:34:26 executing program 3: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x80040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0xd5b}]}) 19:34:26 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0) lseek(r0, 0x6080, 0x0) 19:34:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x8, 0x0, 0x20000000) 19:34:26 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x8, 0x0, 0x20000000) 19:34:26 executing program 3: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x80040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0xd5b}]}) 19:34:26 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/247, 0xf7, 0x0) lseek(r0, 0x6080, 0x0) 19:34:26 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8929, &(0x7f0000000140)={'lo\x00'}) 19:34:26 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 3: r0 = syz_open_dev$loop(0xfffffffffffffffc, 0x0, 0x80040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0xd5b}]}) 19:34:26 executing program 5: socketpair(0x1, 0x4, 0xdc3, &(0x7f00000001c0)) 19:34:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x8, 0x0, 0x20000000) 19:34:26 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) fcntl$notify(r0, 0x402, 0x5) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) fcntl$notify(r1, 0x402, 0x80000010) dup3(r0, r1, 0x0) 19:34:26 executing program 5: socketpair(0x1, 0x4, 0xdc3, &(0x7f00000001c0)) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0xac}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19:34:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x913, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x3c}}, 0x0) 19:34:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffff000}}, 0x841) 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 19:34:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x913, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x3c}}, 0x0) 19:34:26 executing program 5: socketpair(0x1, 0x4, 0xdc3, &(0x7f00000001c0)) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 103.187448][ T22] kauditd_printk_skb: 56 callbacks suppressed [ 103.187460][ T22] audit: type=1400 audit(1634844866.762:332): avc: denied { mounton } for pid=7183 comm="syz-executor.3" path="/root/syzkaller-testdir247751164/syzkaller.bqmLqP/269/file0/file0" dev="cgroup2" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 19:34:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffff000}}, 0x841) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0xac}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x913, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x3c}}, 0x0) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 5: socketpair(0x1, 0x4, 0xdc3, &(0x7f00000001c0)) 19:34:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffff000}}, 0x841) 19:34:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) rmdir(&(0x7f00000000c0)='./file0\x00') 19:34:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 19:34:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0xac}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19:34:26 executing program 5: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r2, &(0x7f0000000140)) 19:34:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffff000}}, 0x841) 19:34:27 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000001240)="0b73e0f3195a15c4800f1b9bcbdaf7bdc4478aa4e45ba9873f9943fd45405a76eec1d9ee34f9e0afa76dc5e9b4ae97b2b23a2a39c2027d6da2657279a1a5e547be79924858f15813625692faedf0f0570047c888c6656b06abb727f5cd1e516b16d080285d7de061f10a47e57c0282758e8b1f5d267e28f913d7083781bfa388d40504a7dc25a89b9eff97fe739e388912fc564546bce6ea37b709890bb531b054f2c08b054231dcc00a", 0xaa}], 0x1) 19:34:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0xac}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19:34:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x913, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x3c}}, 0x0) 19:34:27 executing program 5: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r2, &(0x7f0000000140)) 19:34:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) [ 103.437005][ T22] audit: type=1400 audit(1634844867.012:333): avc: denied { mac_admin } for pid=7231 comm="syz-executor.3" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.437084][ T7232] SELinux: Context sàóZÄ€›ËÚ÷½ÄGŠ¤ä[©‡?™CýE@ZvîÁÙî4ù௧mÅé´®—²²:*9Â}m¢ery¡¥åG¾y’HXñXbV’úíððW is not valid (left unmapped). 19:34:27 executing program 5: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r2, &(0x7f0000000140)) 19:34:27 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:34:27 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:34:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x74}]}) 19:34:27 executing program 5: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r2, &(0x7f0000000140)) 19:34:27 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') fchmod(r0, 0x0) 19:34:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x74}]}) 19:34:27 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x0) 19:34:27 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 103.573064][ T22] audit: type=1400 audit(1634844867.142:334): avc: denied { mounton } for pid=7245 comm="syz-executor.4" path=2F726F6F742F73797A6B616C6C65722D746573746469723138383333363432372F73797A6B616C6C65722E4D32454953582F3330392FE91F7189591E9233614B dev="sda1" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 19:34:27 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') fchmod(r0, 0x0) 19:34:27 executing program 5: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) 19:34:27 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:34:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x74}]}) 19:34:27 executing program 0: poll(&(0x7f0000000340)=[{}, {}, {}], 0x2000000000000160, 0x0) 19:34:27 executing program 5: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) 19:34:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x74}]}) 19:34:27 executing program 0: poll(&(0x7f0000000340)=[{}, {}, {}], 0x2000000000000160, 0x0) 19:34:27 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:34:27 executing program 5: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) 19:34:27 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') fchmod(r0, 0x0) 19:34:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:34:28 executing program 5: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) 19:34:28 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') fchmod(r0, 0x0) 19:34:28 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:34:28 executing program 0: poll(&(0x7f0000000340)=[{}, {}, {}], 0x2000000000000160, 0x0) 19:34:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}, @ip_tos_int={{0x18, 0x0, 0x2}}], 0x38}}], 0x2, 0x0) 19:34:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}, @ip_tos_int={{0x18, 0x0, 0x2}}], 0x38}}], 0x2, 0x0) 19:34:28 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/4) 19:34:28 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0), 0xffffffffffffffff, 0x0) 19:34:28 executing program 0: poll(&(0x7f0000000340)=[{}, {}, {}], 0x2000000000000160, 0x0) 19:34:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 19:34:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x108800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701ba5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e53611e051079ec579780a3422e4fe9b041289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be2061", 0x89, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 19:34:28 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:28 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0), 0xffffffffffffffff, 0x0) 19:34:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}, @ip_tos_int={{0x18, 0x0, 0x2}}], 0x38}}], 0x2, 0x0) 19:34:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xdb, &(0x7f00000001c0)="c4caf9b7184d5d5802005338e386b3fa8b63974fa9a5f9edaae676fe976d6f5bdec0ff03d5341cf2139f5d6fa4a614d4eb78eb6aaa7a79ce8869f22e0327bb6c892ba3c1aaab805a0733bd07099e28a5a8c86dc5ea603d0b4ab71a2f5f82940667979e5552576979bdba59843b4fe85311afc0ad4406a25c6cadee36ea48d4d441baa091228dbb61036d7e014a9380ac869d94d607bba801127d05b4ba4dc3c1d934cb0c3266add1dda41f352d4a24c38a0198fafa49d4ac261596e3932f2d45be8c595c1b5682d7528d994e1bd096f0a1d56b7c456aef4296e58b"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:34:28 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/4) 19:34:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @private}}}, @ip_tos_int={{0x18, 0x0, 0x2}}], 0x38}}], 0x2, 0x0) 19:34:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="162b82a12903f8d2b70720cda303a6a3186128b5977b50aca0bdb47dcc180688aa6ad8fcc3116c2e0f20723737a6fda80bd1b15e120126141dfc1038af1b82ac8aeabc7709000000d629d9abfae00714025d0e980656d04c9b1cbc", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:34:28 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0), 0xffffffffffffffff, 0x0) [ 104.596773][ T7317] loop4: detected capacity change from 0 to 4232 19:34:28 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0), 0xffffffffffffffff, 0x0) 19:34:28 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/4) 19:34:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x204, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:34:28 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYBLOB="ebb230b946eb7dec4c29aefada42", @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x8054) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x80, 0x0, 0x10, 0x70b928, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x5670}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8014) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x121000, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x80, 0xff, 0x7, 0x53, 0x0, 0x4, 0x4844, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000280), 0x9}, 0x124c0, 0x4, 0x7, 0x5, 0x7f, 0xb9e, 0xc87, 0x0, 0x7fffffff, 0x0, 0x800}, 0x0, 0xe, r3, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000d40)=ANY=[], 0xfffffecc) write$P9_RLERRORu(r6, &(0x7f0000000240)={0x10, 0x7, 0x0, {{0x3, '@@*'}}}, 0x10) [ 104.713537][ T7345] loop2: detected capacity change from 0 to 16 [ 104.747651][ C1] scsi_io_completion_action: 6 callbacks suppressed [ 104.747674][ C1] sd 0:0:1:0: tag#5983 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 104.764090][ C1] sd 0:0:1:0: tag#5983 CDB: opcode=0xe5 (vendor) [ 104.770550][ C1] sd 0:0:1:0: tag#5983 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 104.779577][ C1] sd 0:0:1:0: tag#5983 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 104.788627][ C1] sd 0:0:1:0: tag#5983 CDB[20]: ba 19:34:29 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:29 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/4) 19:34:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x108800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701ba5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e53611e051079ec579780a3422e4fe9b041289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be2061", 0x89, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 19:34:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) 19:34:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x204, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:34:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) 19:34:29 executing program 5: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) [ 105.476416][ T7360] loop2: detected capacity change from 0 to 16 [ 105.480860][ T7362] loop4: detected capacity change from 0 to 4232 19:34:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x108800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701ba5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e53611e051079ec579780a3422e4fe9b041289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be2061", 0x89, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 19:34:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) 19:34:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000001c0)) 19:34:29 executing program 3: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x204, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 105.599687][ T7379] loop4: detected capacity change from 0 to 4232 [ 105.640019][ T7385] loop2: detected capacity change from 0 to 16 19:34:29 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19:34:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x108800}, {&(0x7f00000002c0)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701ba5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e53611e051079ec579780a3422e4fe9b041289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be2061", 0x89, 0xe000}], 0x0, &(0x7f00000003c0)=ANY=[]) 19:34:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x204, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145802, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) dup3(r2, r0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 19:34:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19:34:29 executing program 5: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) [ 106.334765][ T7389] loop4: detected capacity change from 0 to 4232 [ 106.341619][ T7391] loop2: detected capacity change from 0 to 16 19:34:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19:34:29 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 19:34:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19:34:30 executing program 0: madvise(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x13) 19:34:30 executing program 3: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:30 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 19:34:30 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:30 executing program 2: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 19:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0xf000000, 0xffffffffffffffff) 19:34:30 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 19:34:30 executing program 2: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 19:34:30 executing program 5: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:30 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 19:34:30 executing program 2: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 19:34:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0xf000000, 0xffffffffffffffff) 19:34:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1) 19:34:30 executing program 3: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x20, 0x3fc, 0xa}, 0x48) lseek(r0, 0x8d9, 0x0) 19:34:30 executing program 2: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x0, 0x0, 0x20}, 0x20) 19:34:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1) 19:34:31 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0xf000000, 0xffffffffffffffff) 19:34:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="52533c284080", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x0, 0x0, 0x20}, 0x20) 19:34:31 executing program 5: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000012c0), 0x20, 0x1, 0x0) 19:34:31 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0xf000000, 0xffffffffffffffff) 19:34:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="52533c284080", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:31 executing program 5: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000012c0), 0x20, 0x1, 0x0) 19:34:31 executing program 0: unshare(0x6c060000) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 19:34:31 executing program 5: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000012c0), 0x20, 0x1, 0x0) 19:34:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x0, 0x0, 0x20}, 0x20) 19:34:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="52533c284080", 0x0, 0x0, 0x0, 0x0, 0x0}) 19:34:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x0, 0x0, 0x20}, 0x20) 19:34:31 executing program 5: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000012c0), 0x20, 0x1, 0x0) 19:34:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="52533c284080", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 108.177795][ T7480] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 19:34:31 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x8}) 19:34:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 19:34:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(0x0, 0x0) [ 108.240900][ T7477] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 108.259081][ T7492] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 108.276943][ T7495] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 108.287771][ T22] audit: type=1326 audit(1634844871.872:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.323106][ T22] audit: type=1326 audit(1634844871.892:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.347015][ T22] audit: type=1326 audit(1634844871.892:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x8}) 19:34:32 executing program 2: unshare(0x62000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:34:32 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0x9, 0x7) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) 19:34:32 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(0x0, 0x0) 19:34:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 19:34:32 executing program 0: unshare(0x6c060000) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 108.370914][ T22] audit: type=1326 audit(1634844871.892:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.394977][ T22] audit: type=1326 audit(1634844871.892:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.437767][ T22] audit: type=1326 audit(1634844872.012:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.447284][ T7510] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 108.461715][ T22] audit: type=1326 audit(1634844872.012:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.493638][ T22] audit: type=1326 audit(1634844872.022:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.513872][ T7502] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 19:34:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 19:34:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x8}) 19:34:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x8}) 19:34:32 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(0x0, 0x0) 19:34:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004b80)=[{{&(0x7f0000000140)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 108.517459][ T22] audit: type=1326 audit(1634844872.022:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 [ 108.546667][ T7515] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 108.549498][ T22] audit: type=1326 audit(1634844872.022:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7505 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3add2a39 code=0x7ffc0000 19:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 2: unshare(0x62000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:34:32 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(0x0, 0x0) [ 108.593512][ T7521] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 108.628174][ T7512] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 19:34:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004b80)=[{{&(0x7f0000000140)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) 19:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004b80)=[{{&(0x7f0000000140)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) 19:34:32 executing program 0: unshare(0x6c060000) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 19:34:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000)={0x80000, 0xffffefffffffdffd}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) 19:34:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000)={0x80000, 0xffffefffffffdffd}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) 19:34:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004b80)=[{{&(0x7f0000000140)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) 19:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) [ 108.749209][ T7531] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 19:34:32 executing program 2: unshare(0x62000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:34:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 19:34:32 executing program 0: unshare(0x6c060000) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 19:34:32 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000)={0x80000, 0xffffefffffffdffd}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) 19:34:32 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./control\x00', 0x2000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000100) rmdir(&(0x7f0000000040)='./control\x00') 19:34:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080002000d001000", 0x24) 19:34:32 executing program 2: unshare(0x62000200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:34:32 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x7, &(0x7f0000000040), 0x8) 19:34:32 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000)={0x80000, 0xffffefffffffdffd}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) 19:34:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19:34:32 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./control\x00', 0x2000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000100) rmdir(&(0x7f0000000040)='./control\x00') 19:34:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080002000d001000", 0x24) 19:34:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 108.982766][ T7578] loop4: detected capacity change from 0 to 264192 19:34:32 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./control\x00', 0x2000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000100) rmdir(&(0x7f0000000040)='./control\x00') 19:34:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 109.054888][ T4040] kernel write not supported for file task/7587/net/ip6_tables_matches (pid: 4040 comm: kworker/1:3) [ 109.067746][ T7588] cgroup: fork rejected by pids controller in /syz3 [ 109.089754][ T4040] kernel write not supported for file task/7587/net/ip6_tables_matches (pid: 4040 comm: kworker/1:3) 19:34:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080002000d001000", 0x24) 19:34:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./control\x00', 0x2000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000100) rmdir(&(0x7f0000000040)='./control\x00') 19:34:32 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 19:34:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000080002000d001000", 0x24) 19:34:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 109.189512][ T7604] loop4: detected capacity change from 0 to 264192 [ 109.206912][ T7] kernel write not supported for file task/7608/net/ip6_tables_matches (pid: 7 comm: kworker/0:1) 19:34:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:34:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19:34:32 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008140)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 109.255511][ T4040] kernel write not supported for file task/7613/net/ip6_tables_matches (pid: 4040 comm: kworker/1:3) 19:34:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19:34:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 19:34:32 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shutdown(r3, 0x0) 19:34:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, 0x0) [ 109.308884][ T7623] loop1: detected capacity change from 0 to 264192 [ 109.331402][ T7] kernel write not supported for file task/7624/net/ip6_tables_matches (pid: 7 comm: kworker/0:1) 19:34:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, 0x0) 19:34:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 19:34:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19:34:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 19:34:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, 0x0) 19:34:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 19:34:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') [ 109.447464][ T7642] loop1: detected capacity change from 0 to 264192 [ 109.471862][ T7644] loop4: detected capacity change from 0 to 264192 19:34:33 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c0a, 0x0) 19:34:33 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000600)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x80, &(0x7f0000000680)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19:34:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') [ 109.648222][ T7657] loop4: detected capacity change from 0 to 264192 [ 109.657826][ T7657] ==================================================================