Warning: Permanently added '10.128.1.77' (ECDSA) to the list of known hosts. 2021/08/31 12:49:28 fuzzer started 2021/08/31 12:49:28 dialing manager at 10.128.0.163:44205 2021/08/31 12:49:29 syscalls: 1973 2021/08/31 12:49:29 code coverage: enabled 2021/08/31 12:49:29 comparison tracing: enabled 2021/08/31 12:49:29 extra coverage: enabled 2021/08/31 12:49:29 setuid sandbox: enabled 2021/08/31 12:49:29 namespace sandbox: enabled 2021/08/31 12:49:29 Android sandbox: enabled 2021/08/31 12:49:29 fault injection: enabled 2021/08/31 12:49:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/08/31 12:49:29 net packet injection: /dev/net/tun does not exist 2021/08/31 12:49:29 net device setup: enabled 2021/08/31 12:49:29 concurrency sanitizer: enabled 2021/08/31 12:49:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/08/31 12:49:29 USB emulation: /dev/raw-gadget does not exist 2021/08/31 12:49:29 hci packet injection: /dev/vhci does not exist 2021/08/31 12:49:29 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/08/31 12:49:29 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/08/31 12:49:30 suppressing KCSAN reports in functions: 'n_tty_receive_char' 'dd_has_work' 'blk_mq_sched_dispatch_requests' 'n_tty_receive_buf_common' 'audit_log_start' 'blk_mq_rq_ctx_init' 'internal_add_timer' 'ext4_free_inodes_count' 'alloc_pid' 'kauditd_thread' 'step_into' 'lookup_fast' '__xa_clear_mark' 'blk_mq_dispatch_rq_list' '__mark_inode_dirty' 'do_sys_poll' '__xa_set_mark' 'xas_clear_mark' 'tick_nohz_next_event' 'ext4_writepages' 'generic_write_end' 2021/08/31 12:49:30 fetching corpus: 0, signal 0/2000 (executing program) 2021/08/31 12:49:30 fetching corpus: 50, signal 10628/14463 (executing program) 2021/08/31 12:49:30 fetching corpus: 100, signal 19390/24915 (executing program) 2021/08/31 12:49:30 fetching corpus: 150, signal 26385/33541 (executing program) 2021/08/31 12:49:30 fetching corpus: 200, signal 33263/41965 (executing program) 2021/08/31 12:49:30 fetching corpus: 250, signal 36573/46853 (executing program) 2021/08/31 12:49:30 fetching corpus: 300, signal 41176/52926 (executing program) 2021/08/31 12:49:30 fetching corpus: 350, signal 45198/58355 (executing program) 2021/08/31 12:49:30 fetching corpus: 400, signal 47806/62447 (executing program) 2021/08/31 12:49:30 fetching corpus: 450, signal 52500/68402 (executing program) 2021/08/31 12:49:31 fetching corpus: 500, signal 55462/72685 (executing program) 2021/08/31 12:49:31 fetching corpus: 550, signal 58016/76539 (executing program) 2021/08/31 12:49:31 fetching corpus: 600, signal 59776/79688 (executing program) 2021/08/31 12:49:31 fetching corpus: 650, signal 63289/84326 (executing program) 2021/08/31 12:49:31 fetching corpus: 700, signal 65577/87841 (executing program) 2021/08/31 12:49:31 fetching corpus: 750, signal 67164/90738 (executing program) 2021/08/31 12:49:31 fetching corpus: 800, signal 69132/93925 (executing program) 2021/08/31 12:49:31 fetching corpus: 850, signal 71939/97808 (executing program) 2021/08/31 12:49:31 fetching corpus: 900, signal 74071/101053 (executing program) 2021/08/31 12:49:31 fetching corpus: 950, signal 75749/103885 (executing program) 2021/08/31 12:49:31 fetching corpus: 1000, signal 77994/107215 (executing program) 2021/08/31 12:49:31 fetching corpus: 1050, signal 79863/110178 (executing program) 2021/08/31 12:49:31 fetching corpus: 1100, signal 81517/112908 (executing program) 2021/08/31 12:49:31 fetching corpus: 1150, signal 83641/115945 (executing program) 2021/08/31 12:49:31 fetching corpus: 1200, signal 85460/118778 (executing program) 2021/08/31 12:49:31 fetching corpus: 1250, signal 86796/121200 (executing program) 2021/08/31 12:49:31 fetching corpus: 1300, signal 87917/123395 (executing program) 2021/08/31 12:49:31 fetching corpus: 1350, signal 89232/125705 (executing program) 2021/08/31 12:49:31 fetching corpus: 1400, signal 90289/127827 (executing program) 2021/08/31 12:49:31 fetching corpus: 1450, signal 91415/129981 (executing program) 2021/08/31 12:49:31 fetching corpus: 1500, signal 92312/131951 (executing program) 2021/08/31 12:49:31 fetching corpus: 1550, signal 93964/134412 (executing program) 2021/08/31 12:49:31 fetching corpus: 1600, signal 95159/136550 (executing program) 2021/08/31 12:49:31 fetching corpus: 1650, signal 96210/138570 (executing program) 2021/08/31 12:49:31 fetching corpus: 1700, signal 98117/141183 (executing program) 2021/08/31 12:49:31 fetching corpus: 1750, signal 100691/144292 (executing program) 2021/08/31 12:49:31 fetching corpus: 1800, signal 102327/146640 (executing program) 2021/08/31 12:49:31 fetching corpus: 1850, signal 102909/148223 (executing program) 2021/08/31 12:49:31 fetching corpus: 1900, signal 103737/150012 (executing program) 2021/08/31 12:49:31 fetching corpus: 1950, signal 104881/152008 (executing program) 2021/08/31 12:49:32 fetching corpus: 2000, signal 105911/153891 (executing program) 2021/08/31 12:49:32 fetching corpus: 2050, signal 106759/155648 (executing program) 2021/08/31 12:49:32 fetching corpus: 2100, signal 107648/157403 (executing program) 2021/08/31 12:49:32 fetching corpus: 2150, signal 108930/159410 (executing program) 2021/08/31 12:49:32 fetching corpus: 2200, signal 109822/161075 (executing program) 2021/08/31 12:49:32 fetching corpus: 2250, signal 110334/162555 (executing program) 2021/08/31 12:49:32 fetching corpus: 2300, signal 111790/164562 (executing program) 2021/08/31 12:49:32 fetching corpus: 2350, signal 112585/166196 (executing program) 2021/08/31 12:49:32 fetching corpus: 2400, signal 113457/167854 (executing program) 2021/08/31 12:49:32 fetching corpus: 2450, signal 114542/169602 (executing program) 2021/08/31 12:49:32 fetching corpus: 2500, signal 115394/171256 (executing program) 2021/08/31 12:49:32 fetching corpus: 2550, signal 115997/172709 (executing program) 2021/08/31 12:49:32 fetching corpus: 2600, signal 116630/174164 (executing program) 2021/08/31 12:49:32 fetching corpus: 2650, signal 117192/175557 (executing program) 2021/08/31 12:49:32 fetching corpus: 2700, signal 117797/176969 (executing program) 2021/08/31 12:49:32 fetching corpus: 2750, signal 118508/178443 (executing program) 2021/08/31 12:49:32 fetching corpus: 2800, signal 119988/180310 (executing program) 2021/08/31 12:49:32 fetching corpus: 2849, signal 120493/181641 (executing program) 2021/08/31 12:49:32 fetching corpus: 2899, signal 121201/183054 (executing program) 2021/08/31 12:49:32 fetching corpus: 2949, signal 122171/184591 (executing program) 2021/08/31 12:49:32 fetching corpus: 2999, signal 123208/186198 (executing program) 2021/08/31 12:49:32 fetching corpus: 3049, signal 123886/187599 (executing program) 2021/08/31 12:49:32 fetching corpus: 3099, signal 124430/188929 (executing program) 2021/08/31 12:49:32 fetching corpus: 3149, signal 125675/190558 (executing program) 2021/08/31 12:49:32 fetching corpus: 3199, signal 126538/192006 (executing program) 2021/08/31 12:49:32 fetching corpus: 3249, signal 127618/193525 (executing program) 2021/08/31 12:49:32 fetching corpus: 3299, signal 128295/194837 (executing program) 2021/08/31 12:49:32 fetching corpus: 3349, signal 128750/196072 (executing program) 2021/08/31 12:49:32 fetching corpus: 3399, signal 129469/197403 (executing program) 2021/08/31 12:49:33 fetching corpus: 3449, signal 129987/198612 (executing program) 2021/08/31 12:49:33 fetching corpus: 3499, signal 130925/200020 (executing program) 2021/08/31 12:49:33 fetching corpus: 3549, signal 131763/201334 (executing program) 2021/08/31 12:49:33 fetching corpus: 3599, signal 132489/202642 (executing program) 2021/08/31 12:49:33 fetching corpus: 3649, signal 133052/203800 (executing program) 2021/08/31 12:49:33 fetching corpus: 3699, signal 134099/205184 (executing program) 2021/08/31 12:49:33 fetching corpus: 3749, signal 134804/206392 (executing program) 2021/08/31 12:49:33 fetching corpus: 3799, signal 135492/207613 (executing program) 2021/08/31 12:49:33 fetching corpus: 3849, signal 136373/208898 (executing program) 2021/08/31 12:49:33 fetching corpus: 3899, signal 136722/209937 (executing program) 2021/08/31 12:49:33 fetching corpus: 3949, signal 137419/211103 (executing program) 2021/08/31 12:49:33 fetching corpus: 3999, signal 138130/212265 (executing program) 2021/08/31 12:49:33 fetching corpus: 4049, signal 139401/213662 (executing program) 2021/08/31 12:49:33 fetching corpus: 4098, signal 139855/214751 (executing program) 2021/08/31 12:49:33 fetching corpus: 4148, signal 140789/215998 (executing program) 2021/08/31 12:49:33 fetching corpus: 4198, signal 141341/217039 (executing program) 2021/08/31 12:49:33 fetching corpus: 4248, signal 141881/218098 (executing program) 2021/08/31 12:49:33 fetching corpus: 4298, signal 142460/219173 (executing program) 2021/08/31 12:49:33 fetching corpus: 4348, signal 142811/220161 (executing program) 2021/08/31 12:49:33 fetching corpus: 4398, signal 143630/221289 (executing program) 2021/08/31 12:49:33 fetching corpus: 4448, signal 144339/222398 (executing program) 2021/08/31 12:49:33 fetching corpus: 4498, signal 144954/223431 (executing program) 2021/08/31 12:49:33 fetching corpus: 4548, signal 145601/224433 (executing program) 2021/08/31 12:49:33 fetching corpus: 4598, signal 146525/225515 (executing program) 2021/08/31 12:49:33 fetching corpus: 4648, signal 147071/226521 (executing program) 2021/08/31 12:49:33 fetching corpus: 4698, signal 148001/227601 (executing program) 2021/08/31 12:49:33 fetching corpus: 4748, signal 148541/228541 (executing program) 2021/08/31 12:49:33 fetching corpus: 4798, signal 148982/229442 (executing program) 2021/08/31 12:49:34 fetching corpus: 4848, signal 149689/230415 (executing program) 2021/08/31 12:49:34 fetching corpus: 4898, signal 150064/231320 (executing program) 2021/08/31 12:49:34 fetching corpus: 4948, signal 150557/232262 (executing program) 2021/08/31 12:49:34 fetching corpus: 4998, signal 151189/233247 (executing program) 2021/08/31 12:49:34 fetching corpus: 5048, signal 151706/234152 (executing program) 2021/08/31 12:49:34 fetching corpus: 5098, signal 152780/235142 (executing program) 2021/08/31 12:49:34 fetching corpus: 5148, signal 153261/236033 (executing program) 2021/08/31 12:49:34 fetching corpus: 5198, signal 153945/236952 (executing program) 2021/08/31 12:49:34 fetching corpus: 5248, signal 154569/237879 (executing program) 2021/08/31 12:49:34 fetching corpus: 5298, signal 154970/238743 (executing program) 2021/08/31 12:49:34 fetching corpus: 5348, signal 155366/239580 (executing program) 2021/08/31 12:49:34 fetching corpus: 5398, signal 155884/240461 (executing program) 2021/08/31 12:49:34 fetching corpus: 5448, signal 156202/241299 (executing program) 2021/08/31 12:49:34 fetching corpus: 5498, signal 156492/242130 (executing program) 2021/08/31 12:49:34 fetching corpus: 5548, signal 156890/242946 (executing program) 2021/08/31 12:49:34 fetching corpus: 5598, signal 157226/243752 (executing program) 2021/08/31 12:49:34 fetching corpus: 5648, signal 157894/244550 (executing program) 2021/08/31 12:49:34 fetching corpus: 5698, signal 158471/245374 (executing program) 2021/08/31 12:49:34 fetching corpus: 5748, signal 158947/246156 (executing program) 2021/08/31 12:49:34 fetching corpus: 5798, signal 159363/246953 (executing program) 2021/08/31 12:49:34 fetching corpus: 5848, signal 159770/247737 (executing program) 2021/08/31 12:49:34 fetching corpus: 5898, signal 160150/248520 (executing program) 2021/08/31 12:49:34 fetching corpus: 5948, signal 160672/249288 (executing program) 2021/08/31 12:49:34 fetching corpus: 5998, signal 161009/250017 (executing program) 2021/08/31 12:49:34 fetching corpus: 6048, signal 161817/250818 (executing program) 2021/08/31 12:49:34 fetching corpus: 6098, signal 162150/251552 (executing program) 2021/08/31 12:49:34 fetching corpus: 6148, signal 162661/252328 (executing program) 2021/08/31 12:49:34 fetching corpus: 6198, signal 163017/253063 (executing program) 2021/08/31 12:49:34 fetching corpus: 6248, signal 163750/253830 (executing program) 2021/08/31 12:49:35 fetching corpus: 6298, signal 164307/254547 (executing program) 2021/08/31 12:49:35 fetching corpus: 6348, signal 164666/254854 (executing program) 2021/08/31 12:49:35 fetching corpus: 6398, signal 165140/254854 (executing program) 2021/08/31 12:49:35 fetching corpus: 6448, signal 165674/254883 (executing program) 2021/08/31 12:49:35 fetching corpus: 6497, signal 166173/254885 (executing program) 2021/08/31 12:49:35 fetching corpus: 6547, signal 166641/254885 (executing program) 2021/08/31 12:49:35 fetching corpus: 6597, signal 166970/254885 (executing program) 2021/08/31 12:49:35 fetching corpus: 6647, signal 167260/254889 (executing program) 2021/08/31 12:49:35 fetching corpus: 6697, signal 168276/254891 (executing program) 2021/08/31 12:49:35 fetching corpus: 6747, signal 168588/254891 (executing program) 2021/08/31 12:49:35 fetching corpus: 6797, signal 169124/254891 (executing program) 2021/08/31 12:49:35 fetching corpus: 6847, signal 169578/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 6897, signal 170043/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 6947, signal 170377/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 6997, signal 170736/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7047, signal 171128/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7097, signal 171707/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7147, signal 172008/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7197, signal 172499/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7247, signal 172899/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7297, signal 173294/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7347, signal 173594/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7397, signal 173914/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7447, signal 174243/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7497, signal 174851/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7547, signal 175111/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7597, signal 175466/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7647, signal 176094/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7697, signal 176409/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7747, signal 176673/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7797, signal 176933/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7847, signal 177242/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7897, signal 177715/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7947, signal 178163/254898 (executing program) 2021/08/31 12:49:35 fetching corpus: 7997, signal 178558/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8047, signal 178901/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8097, signal 179296/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8147, signal 179574/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8197, signal 179799/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8247, signal 180131/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8297, signal 180442/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8347, signal 180827/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8397, signal 181296/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8447, signal 181757/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8497, signal 182189/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8547, signal 182430/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8597, signal 182747/254898 (executing program) 2021/08/31 12:49:36 fetching corpus: 8647, signal 183096/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8697, signal 183633/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8747, signal 183924/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8797, signal 184457/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8847, signal 184863/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8897, signal 185219/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8947, signal 185787/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 8997, signal 185985/254912 (executing program) 2021/08/31 12:49:36 fetching corpus: 9047, signal 186508/254914 (executing program) 2021/08/31 12:49:36 fetching corpus: 9097, signal 186821/254914 (executing program) 2021/08/31 12:49:36 fetching corpus: 9147, signal 187256/254914 (executing program) 2021/08/31 12:49:36 fetching corpus: 9197, signal 187684/254914 (executing program) 2021/08/31 12:49:36 fetching corpus: 9247, signal 188408/254914 (executing program) 2021/08/31 12:49:36 fetching corpus: 9297, signal 188768/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9347, signal 189108/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9397, signal 189610/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9447, signal 190303/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9497, signal 190604/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9547, signal 191022/254928 (executing program) 2021/08/31 12:49:36 fetching corpus: 9597, signal 191264/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9647, signal 191611/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9697, signal 191991/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9747, signal 192395/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9797, signal 192809/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9847, signal 193127/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9897, signal 193426/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9947, signal 193711/254928 (executing program) 2021/08/31 12:49:37 fetching corpus: 9997, signal 194010/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10047, signal 194281/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10097, signal 194552/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10147, signal 194907/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10197, signal 195163/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10247, signal 195419/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10297, signal 195782/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10347, signal 196065/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10397, signal 196361/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10447, signal 196709/254936 (executing program) 2021/08/31 12:49:37 fetching corpus: 10497, signal 197033/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10547, signal 197311/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10597, signal 197612/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10647, signal 197826/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10697, signal 198146/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10747, signal 198502/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10797, signal 198926/254941 (executing program) 2021/08/31 12:49:37 fetching corpus: 10847, signal 199250/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 10897, signal 199451/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 10947, signal 199645/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 10997, signal 200072/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11047, signal 200469/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11097, signal 200724/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11147, signal 201308/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11197, signal 201539/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11247, signal 201767/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11297, signal 202121/254942 (executing program) 2021/08/31 12:49:37 fetching corpus: 11347, signal 202549/254942 (executing program) 2021/08/31 12:49:38 fetching corpus: 11397, signal 202820/254944 (executing program) 2021/08/31 12:49:38 fetching corpus: 11447, signal 203015/254944 (executing program) 2021/08/31 12:49:38 fetching corpus: 11496, signal 203476/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11545, signal 203698/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11595, signal 204008/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11645, signal 204246/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11695, signal 204512/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11745, signal 204772/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11795, signal 205113/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11845, signal 205309/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11895, signal 205621/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11945, signal 205812/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 11995, signal 206026/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12045, signal 206457/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12095, signal 206727/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12145, signal 206953/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12195, signal 207262/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12245, signal 207472/254948 (executing program) 2021/08/31 12:49:38 fetching corpus: 12295, signal 207764/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12345, signal 208089/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12395, signal 208309/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12445, signal 208644/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12495, signal 209044/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12545, signal 209214/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12595, signal 209548/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12645, signal 209775/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12695, signal 210027/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12745, signal 210302/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12795, signal 210609/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12845, signal 210905/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12895, signal 211403/254953 (executing program) 2021/08/31 12:49:38 fetching corpus: 12945, signal 211790/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 12995, signal 212002/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13045, signal 212416/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13095, signal 212707/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13145, signal 212898/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13195, signal 213094/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13245, signal 213457/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13295, signal 213668/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13345, signal 213934/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13395, signal 214200/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13445, signal 214442/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13495, signal 214597/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13545, signal 214768/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13595, signal 214964/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13645, signal 215124/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13695, signal 215383/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13745, signal 215623/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13795, signal 215937/254959 (executing program) 2021/08/31 12:49:39 fetching corpus: 13845, signal 216294/254974 (executing program) 2021/08/31 12:49:39 fetching corpus: 13895, signal 216535/254974 (executing program) 2021/08/31 12:49:39 fetching corpus: 13945, signal 216987/254974 (executing program) 2021/08/31 12:49:39 fetching corpus: 13995, signal 217137/254974 (executing program) 2021/08/31 12:49:39 fetching corpus: 14045, signal 217391/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14095, signal 217671/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14145, signal 217895/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14195, signal 218203/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14245, signal 218548/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14295, signal 218792/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14345, signal 219099/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14395, signal 219302/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14445, signal 219510/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14495, signal 219824/254980 (executing program) 2021/08/31 12:49:39 fetching corpus: 14545, signal 220100/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14595, signal 220377/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14645, signal 220644/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14695, signal 221086/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14745, signal 221264/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14795, signal 221556/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14845, signal 221817/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14895, signal 222045/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14945, signal 222326/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 14995, signal 222628/254980 (executing program) 2021/08/31 12:49:40 fetching corpus: 15045, signal 222840/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15095, signal 222997/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15145, signal 223206/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15195, signal 223384/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15245, signal 223675/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15295, signal 223888/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15345, signal 224097/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15395, signal 224418/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15445, signal 224714/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15495, signal 225282/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15545, signal 225480/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15595, signal 225716/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15645, signal 225934/254988 (executing program) 2021/08/31 12:49:40 fetching corpus: 15695, signal 226111/254989 (executing program) 2021/08/31 12:49:40 fetching corpus: 15745, signal 226412/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 15795, signal 226569/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 15845, signal 226795/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 15895, signal 227060/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 15945, signal 227302/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 15995, signal 227602/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 16045, signal 227846/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 16095, signal 228006/254990 (executing program) 2021/08/31 12:49:40 fetching corpus: 16145, signal 228352/254990 (executing program) 2021/08/31 12:49:41 fetching corpus: 16195, signal 228588/254990 (executing program) 2021/08/31 12:49:41 fetching corpus: 16245, signal 228892/254990 (executing program) 2021/08/31 12:49:41 fetching corpus: 16295, signal 229256/254990 (executing program) 2021/08/31 12:49:41 fetching corpus: 16345, signal 229514/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16395, signal 229809/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16445, signal 229966/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16495, signal 230189/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16545, signal 230391/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16595, signal 230707/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16645, signal 230952/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16695, signal 231273/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16745, signal 231516/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16795, signal 231710/255002 (executing program) 2021/08/31 12:49:41 fetching corpus: 16845, signal 231942/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 16895, signal 232088/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 16945, signal 232348/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 16995, signal 232490/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17045, signal 232673/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17095, signal 232977/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17145, signal 233203/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17195, signal 233363/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17244, signal 233582/255004 (executing program) 2021/08/31 12:49:41 fetching corpus: 17294, signal 233804/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17344, signal 233977/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17394, signal 234256/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17444, signal 234498/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17494, signal 234764/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17544, signal 234956/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17594, signal 235124/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17644, signal 235405/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17694, signal 235612/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17744, signal 235909/255006 (executing program) 2021/08/31 12:49:41 fetching corpus: 17794, signal 236140/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 17844, signal 236370/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 17894, signal 236588/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 17944, signal 236917/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 17994, signal 237137/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18044, signal 237291/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18094, signal 237468/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18144, signal 237713/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18194, signal 237957/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18244, signal 238099/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18294, signal 238246/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18344, signal 238404/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18394, signal 238617/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18444, signal 238991/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18494, signal 239192/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18544, signal 239390/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18594, signal 239579/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18644, signal 239858/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18694, signal 240031/255006 (executing program) 2021/08/31 12:49:42 fetching corpus: 18744, signal 240270/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 18794, signal 240446/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 18844, signal 240629/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 18894, signal 240880/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 18944, signal 241114/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 18994, signal 241361/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 19044, signal 241525/255045 (executing program) 2021/08/31 12:49:42 fetching corpus: 19094, signal 241673/255050 (executing program) 2021/08/31 12:49:42 fetching corpus: 19144, signal 241853/255050 (executing program) 2021/08/31 12:49:42 fetching corpus: 19194, signal 242015/255052 (executing program) 2021/08/31 12:49:42 fetching corpus: 19244, signal 242283/255064 (executing program) 2021/08/31 12:49:42 fetching corpus: 19294, signal 242488/255064 (executing program) 2021/08/31 12:49:42 fetching corpus: 19344, signal 242635/255064 (executing program) 2021/08/31 12:49:42 fetching corpus: 19394, signal 242813/255064 (executing program) 2021/08/31 12:49:42 fetching corpus: 19444, signal 243072/255064 (executing program) 2021/08/31 12:49:42 fetching corpus: 19494, signal 243309/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19544, signal 243583/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19594, signal 243759/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19644, signal 243926/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19694, signal 244242/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19744, signal 244528/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19794, signal 244796/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19844, signal 244943/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19894, signal 245166/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19944, signal 245282/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 19994, signal 245453/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20044, signal 245744/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20094, signal 246022/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20144, signal 246280/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20194, signal 246438/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20244, signal 246597/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20294, signal 246739/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20344, signal 246868/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20394, signal 247014/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20443, signal 247186/255064 (executing program) 2021/08/31 12:49:43 fetching corpus: 20493, signal 247407/255065 (executing program) 2021/08/31 12:49:43 fetching corpus: 20543, signal 247673/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20593, signal 247852/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20643, signal 248021/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20693, signal 248344/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20743, signal 248538/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20793, signal 248818/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20843, signal 248994/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20893, signal 249259/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20943, signal 249464/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 20993, signal 249701/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 21043, signal 249867/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 21093, signal 250119/255069 (executing program) 2021/08/31 12:49:43 fetching corpus: 21143, signal 250267/255069 (executing program) 2021/08/31 12:49:44 fetching corpus: 21193, signal 250417/255069 (executing program) 2021/08/31 12:49:44 fetching corpus: 21243, signal 250616/255069 (executing program) 2021/08/31 12:49:44 fetching corpus: 21293, signal 250792/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21343, signal 250928/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21393, signal 251089/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21443, signal 251222/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21493, signal 251365/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21543, signal 251497/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21593, signal 251725/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21643, signal 251934/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21693, signal 252113/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21743, signal 252471/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21793, signal 252618/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21843, signal 252762/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21893, signal 252957/255085 (executing program) 2021/08/31 12:49:44 fetching corpus: 21943, signal 253128/255086 (executing program) 2021/08/31 12:49:44 fetching corpus: 21993, signal 253275/255086 (executing program) 2021/08/31 12:49:44 fetching corpus: 22043, signal 253460/255086 (executing program) 2021/08/31 12:49:44 fetching corpus: 22093, signal 253641/255086 (executing program) 2021/08/31 12:49:44 fetching corpus: 22106, signal 253670/255086 (executing program) 2021/08/31 12:49:44 fetching corpus: 22106, signal 253670/255086 (executing program) 2021/08/31 12:49:46 starting 6 fuzzer processes 12:49:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="07097bb64d2eb800addf47"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)='M') wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 12:49:46 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd3074cfdaa4e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc20201018c9228103b66e1d49d31e322dbecfa63da445b8bef5bd9125939f50bd24daa707b74eb04a348a666bf58b23a3f00cce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296d588ee40d58160fa80f4e9461103fa13cdee25381a61500f763b300ac9c3b764a21eae193e82bb", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x5) 12:49:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:46 executing program 2: unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', 0x0) 12:49:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) 12:49:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@getsadinfo={0x12c, 0x23, 0x1, 0x0, 0x0, 0x0, [@policy={0x0, 0x7, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7}}}, @etimer_thresh={0x1}, @offload={0xc}, @coaddr={0x14, 0xe, @in=@multicast1}, @algo_crypt={0xd0, 0x2, {{'ctr(twofish)\x00'}, 0x440, "a7e7c45f2f23b7816a234012de34523c6e166b7d870c0145b1fb23aa94663cb9735bced1c464af8c0bbbfff75b19c9c8a1e7b2b918bcdd746e847d5b842573cca7dcc976745074fd7ef82a76e3f97196f9ab4574c5c3d7d40774b9113fff2198d86066ca9d128f1f0dfd68f0b9e30a7521d78c6233936f7d506d780b6188a263550589360551893e"}}]}, 0x12c}}, 0x0) syzkaller login: [ 36.210280][ T25] audit: type=1400 audit(1630414186.094:8): avc: denied { execmem } for pid=1811 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 36.289247][ T1817] cgroup: Unknown subsys name 'perf_event' [ 36.295633][ T1817] cgroup: Unknown subsys name 'net_cls' [ 36.297495][ T1818] cgroup: Unknown subsys name 'perf_event' [ 36.328869][ T1818] cgroup: Unknown subsys name 'net_cls' [ 36.346990][ T1821] cgroup: Unknown subsys name 'perf_event' [ 36.353065][ T1821] cgroup: Unknown subsys name 'net_cls' [ 36.370604][ T1827] cgroup: Unknown subsys name 'perf_event' [ 36.372201][ T1822] cgroup: Unknown subsys name 'perf_event' [ 36.380298][ T1827] cgroup: Unknown subsys name 'net_cls' [ 36.383352][ T1826] cgroup: Unknown subsys name 'perf_event' [ 36.397062][ T1826] cgroup: Unknown subsys name 'net_cls' [ 36.402937][ T1822] cgroup: Unknown subsys name 'net_cls' 12:49:50 executing program 2: unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', 0x0) [ 40.347148][ T4497] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.5'. 12:49:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@getsadinfo={0x12c, 0x23, 0x1, 0x0, 0x0, 0x0, [@policy={0x0, 0x7, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7}}}, @etimer_thresh={0x1}, @offload={0xc}, @coaddr={0x14, 0xe, @in=@multicast1}, @algo_crypt={0xd0, 0x2, {{'ctr(twofish)\x00'}, 0x440, "a7e7c45f2f23b7816a234012de34523c6e166b7d870c0145b1fb23aa94663cb9735bced1c464af8c0bbbfff75b19c9c8a1e7b2b918bcdd746e847d5b842573cca7dcc976745074fd7ef82a76e3f97196f9ab4574c5c3d7d40774b9113fff2198d86066ca9d128f1f0dfd68f0b9e30a7521d78c6233936f7d506d780b6188a263550589360551893e"}}]}, 0x12c}}, 0x0) 12:49:50 executing program 2: unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', 0x0) 12:49:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@getsadinfo={0x12c, 0x23, 0x1, 0x0, 0x0, 0x0, [@policy={0x0, 0x7, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7}}}, @etimer_thresh={0x1}, @offload={0xc}, @coaddr={0x14, 0xe, @in=@multicast1}, @algo_crypt={0xd0, 0x2, {{'ctr(twofish)\x00'}, 0x440, "a7e7c45f2f23b7816a234012de34523c6e166b7d870c0145b1fb23aa94663cb9735bced1c464af8c0bbbfff75b19c9c8a1e7b2b918bcdd746e847d5b842573cca7dcc976745074fd7ef82a76e3f97196f9ab4574c5c3d7d40774b9113fff2198d86066ca9d128f1f0dfd68f0b9e30a7521d78c6233936f7d506d780b6188a263550589360551893e"}}]}, 0x12c}}, 0x0) 12:49:50 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) 12:49:50 executing program 2: unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/meminfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', 0x0) [ 40.431794][ T4532] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.5'. [ 40.495231][ T4547] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.5'. 12:49:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="07097bb64d2eb800addf47"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)='M') wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 12:49:50 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) 12:49:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x3000000) 12:49:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@getsadinfo={0x12c, 0x23, 0x1, 0x0, 0x0, 0x0, [@policy={0x0, 0x7, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7}}}, @etimer_thresh={0x1}, @offload={0xc}, @coaddr={0x14, 0xe, @in=@multicast1}, @algo_crypt={0xd0, 0x2, {{'ctr(twofish)\x00'}, 0x440, "a7e7c45f2f23b7816a234012de34523c6e166b7d870c0145b1fb23aa94663cb9735bced1c464af8c0bbbfff75b19c9c8a1e7b2b918bcdd746e847d5b842573cca7dcc976745074fd7ef82a76e3f97196f9ab4574c5c3d7d40774b9113fff2198d86066ca9d128f1f0dfd68f0b9e30a7521d78c6233936f7d506d780b6188a263550589360551893e"}}]}, 0x12c}}, 0x0) 12:49:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) 12:49:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="07097bb64d2eb800addf47"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)='M') wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 12:49:50 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) 12:49:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 40.628445][ T4602] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.5'. 12:49:50 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) 12:49:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="07097bb64d2eb800addf47"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)='M') wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 12:49:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) 12:49:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x3000000) 12:49:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 12:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 12:49:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1) 12:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 12:49:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 40.779028][ T4645] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 40.806385][ T4649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:49:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x3000000) 12:49:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087069dc34d1161290869ac9d80b0ebb6b382b9a35e4832e4a956986a7c223001f0cc3048c7c3bf5195cd69cb645d163d2c9b36703fbe9056229a5bcbbdf34ffd0f4937", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 12:49:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) 12:49:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 40.856145][ T4661] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:49:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:49:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x3000000) 12:49:50 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087069dc34d1161290869ac9d80b0ebb6b382b9a35e4832e4a956986a7c223001f0cc3048c7c3bf5195cd69cb645d163d2c9b36703fbe9056229a5bcbbdf34ffd0f4937", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) [ 40.922289][ T4683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:49:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:49:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/98, 0x62}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:49:51 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000780)={0x60060500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) [ 41.667317][ T4725] ------------[ cut here ]------------ [ 41.672836][ T4725] WARNING: CPU: 1 PID: 4725 at arch/x86/entry/vsyscall/vsyscall_64.c:277 emulate_vsyscall+0xaa9/0xd00 [ 41.683818][ T4725] Modules linked in: [ 41.688079][ T4725] CPU: 1 PID: 4725 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 41.696434][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.706524][ T4725] RIP: 0010:emulate_vsyscall+0xaa9/0xd00 [ 41.712276][ T4725] Code: 0d 88 2a 00 4d 8b 3e 4c 89 ff 48 89 ee e8 9f 98 23 00 49 39 ef 0f 85 55 02 00 00 e8 51 96 23 00 e9 a0 f9 ff ff e8 47 96 23 00 <0f> 0b e9 cb fb ff ff e8 3b 96 23 00 eb 75 e8 34 96 23 00 eb 05 e8 [ 41.732067][ T4725] RSP: 0000:ffffc90000d2be30 EFLAGS: 00010283 [ 41.738148][ T4725] RAX: ffffffff81004859 RBX: 0000000000000000 RCX: 0000000000040000 [ 41.746133][ T4725] RDX: ffffc90006f4d000 RSI: 0000000000000066 RDI: 0000000000000067 [ 41.754096][ T4725] RBP: 0000000000000000 R08: ffffffff81004416 R09: 000188812bca479f [ 41.762078][ T4725] R10: 0001ffffffffffff R11: ffff88812bca4040 R12: 0000000000000000 [ 41.770066][ T4725] R13: ffff88812bca4bd0 R14: ffffc90000d2bf58 R15: 0000000000000000 [ 41.778046][ T4725] FS: 00007fa368c30700(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 41.787120][ T4725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.793697][ T4725] CR2: 00000000000fb770 CR3: 000000012d2d9000 CR4: 00000000001506e0 [ 41.801676][ T4725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.809671][ T4725] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.817662][ T4725] Call Trace: [ 41.821003][ T4725] do_user_addr_fault+0x1ef/0xbe0 [ 41.826045][ T4725] ? switch_fpu_return+0xa/0x10 [ 41.830929][ T4725] exc_page_fault+0x91/0x220 [ 41.835670][ T4725] ? asm_exc_page_fault+0x8/0x30 [ 41.840802][ T4725] asm_exc_page_fault+0x1e/0x30 [ 41.845668][ T4725] RIP: 0033:_end+0x7b3da000/0x0 [ 41.850542][ T4725] Code: Unable to access opcode bytes at RIP 0xffffffffff5fffd6. [ 41.858270][ T4725] RSP: 002b:00007fa368c30188 EFLAGS: 00010246 12:49:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:49:51 executing program 0: r0 = mq_open(&(0x7f0000000140)='.\'\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) r1 = dup2(r0, r0) read(r1, 0x0, 0x0) 12:49:51 executing program 4: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000080), 0x8) 12:49:51 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$packet(r0, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1107513e0dc5"}, 0x2) 12:49:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:49:51 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$packet(r0, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1107513e0dc5"}, 0x2) [ 41.864369][ T4725] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 000000000004c70a [ 41.872369][ T4725] RDX: 0000000000001000 RSI: 0000000600000001 RDI: 00000000000fb770 [ 41.880362][ T4725] RBP: 00000000000ad641 R08: 00000000004af000 R09: 00000000004af000 [ 41.888369][ T4725] R10: 00000000000af000 R11: 0000000400000001 R12: 00000000000ad641 [ 41.896367][ T4725] R13: 0000000000401000 R14: 0000000000401000 R15: 0000000000001000 [ 41.904422][ T4725] ---[ end trace ed9626877f81917c ]--- 12:49:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087069dc34d1161290869ac9d80b0ebb6b382b9a35e4832e4a956986a7c223001f0cc3048c7c3bf5195cd69cb645d163d2c9b36703fbe9056229a5bcbbdf34ffd0f4937", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 12:49:53 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$packet(r0, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1107513e0dc5"}, 0x2) 12:49:53 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000780)={0x60060500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) 12:49:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:49:53 executing program 4: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000080), 0x8) 12:49:53 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$packet(r0, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1107513e0dc5"}, 0x2) 12:49:53 executing program 4: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000080), 0x8) 12:49:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087069dc34d1161290869ac9d80b0ebb6b382b9a35e4832e4a956986a7c223001f0cc3048c7c3bf5195cd69cb645d163d2c9b36703fbe9056229a5bcbbdf34ffd0f4937", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 12:49:53 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000780)={0x60060500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) 12:49:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 12:49:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:49:54 executing program 4: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000080), 0x8) 12:49:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 12:49:54 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000780)={0x60060500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) 12:49:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:49:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 12:49:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 12:49:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000004240)='clear_refs\x00') pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x10000000000001fc, 0x0, 0x0) 12:49:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 12:49:56 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 12:49:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 12:49:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000004240)='clear_refs\x00') pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x10000000000001fc, 0x0, 0x0) 12:49:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:49:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './bus\x00'}, 0x6e) 12:49:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 12:49:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000004240)='clear_refs\x00') pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x10000000000001fc, 0x0, 0x0) 12:49:57 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 12:49:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 12:49:57 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) 12:49:57 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 12:49:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000004240)='clear_refs\x00') pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x10000000000001fc, 0x0, 0x0) 12:49:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 12:49:57 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './bus\x00'}, 0x6e) 12:49:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000022c0)={0x64ad}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000004001e0000000000", 0x24) [ 48.072693][ T4921] netlink: 'syz-executor.5': attribute type 30 has an invalid length. [ 48.083618][ T4923] netlink: 'syz-executor.5': attribute type 30 has an invalid length. 12:50:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000022c0)={0x64ad}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000004001e0000000000", 0x24) 12:50:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 12:50:00 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30825e1b", 0x4, 0xffffffffffffffff) 12:50:00 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) 12:50:00 executing program 4: r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:50:00 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './bus\x00'}, 0x6e) 12:50:00 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) 12:50:00 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x109842, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './bus\x00'}, 0x6e) 12:50:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 51.003001][ T4941] netlink: 'syz-executor.5': attribute type 30 has an invalid length. 12:50:00 executing program 4: r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:50:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000022c0)={0x64ad}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000004001e0000000000", 0x24) 12:50:00 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) 12:50:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x150, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 12:50:01 executing program 4: r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:50:01 executing program 3: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 51.104810][ T4963] netlink: 'syz-executor.5': attribute type 30 has an invalid length. 12:50:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000022c0)={0x64ad}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000004001e0000000000", 0x24) 12:50:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 4: r0 = syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x2000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 12:50:01 executing program 3: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 12:50:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x150, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 12:50:01 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 3: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) [ 51.206215][ T4990] netlink: 'syz-executor.5': attribute type 30 has an invalid length. 12:50:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x150, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 12:50:01 executing program 3: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000202200000000000000000000800020000000000", 0x24) 12:50:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x150, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 12:50:01 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) 12:50:01 executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x4008840, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x38, &(0x7f0000003140)}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:50:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000027000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x2e, 0x0) close(r0) 12:50:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000202200000000000000000000800020000000000", 0x24) 12:50:01 executing program 4: r0 = socket(0x2, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x45}]}, 0x10) 12:50:01 executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x4008840, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x38, &(0x7f0000003140)}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:50:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000d80)='ramfs\x00', 0x0, &(0x7f00000001c0)='=,\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\f>\x11\x04IT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,x\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 12:50:01 executing program 2: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000fff004cce0308000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010003000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c25d77b5596168a060c8e016b222f3410015c9800a7900800000ee71ec113fe2d83413f728081c00000100df71"]) 12:50:01 executing program 4: r0 = socket(0x2, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x45}]}, 0x10) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, &(0x7f00000012c0)) 12:50:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000202200000000000000000000800020000000000", 0x24) 12:50:01 executing program 4: r0 = socket(0x2, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x45}]}, 0x10) 12:50:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000d80)='ramfs\x00', 0x0, &(0x7f00000001c0)='=,\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\f>\x11\x04IT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,x\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 12:50:01 executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x4008840, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x38, &(0x7f0000003140)}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 51.473119][ T5061] loop2: detected capacity change from 0 to 131456 [ 51.483200][ T5061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e800e018, mo2=0006] [ 51.499830][ T5061] System zones: 1-2, 19-19, 35-38, 46-46 12:50:01 executing program 4: r0 = socket(0x2, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x45}]}, 0x10) 12:50:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x4000000000000015, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2) [ 51.537403][ T5061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 12:50:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000202200000000000000000000800020000000000", 0x24) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, &(0x7f00000012c0)) 12:50:01 executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x4008840, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x38, &(0x7f0000003140)}, 0x2}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:50:01 executing program 2: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000fff004cce0308000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010003000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c25d77b5596168a060c8e016b222f3410015c9800a7900800000ee71ec113fe2d83413f728081c00000100df71"]) 12:50:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000d80)='ramfs\x00', 0x0, &(0x7f00000001c0)='=,\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\f>\x11\x04IT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,x\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 12:50:01 executing program 3: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 51.584487][ T5061] ext4 filesystem being mounted at /root/syzkaller-testdir262183813/syzkaller.R1jh4l/19/file0 supports timestamps until 2038 (0x7fffffff) 12:50:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000d80)='ramfs\x00', 0x0, &(0x7f00000001c0)='=,\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\f>\x11\x04IT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,x\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 12:50:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000000)={0x39, 0x0, 0xfffffffffffffff9}) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x0, 0x1, 0x1}, &(0x7f0000000040)=[{}]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, &(0x7f00000012c0)) 12:50:01 executing program 0: msgget$private(0x0, 0x0) 12:50:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x4000000000000015, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2) [ 51.690418][ T5106] loop2: detected capacity change from 0 to 131456 [ 51.716304][ T5106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e800e018, mo2=0006] 12:50:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x89e0, &(0x7f000006fe80)={0x0, [], 0x0, "d429e9309fa18f"}) 12:50:01 executing program 3: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1e, 0x0, &(0x7f00000012c0)) [ 51.735958][ T5106] System zones: 1-2, 19-19, 35-38, 46-46 [ 51.748060][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.760134][ C0] hrtimer: interrupt took 18680 ns [ 51.763023][ T5106] ext4 filesystem being mounted at /root/syzkaller-testdir262183813/syzkaller.R1jh4l/20/file0 supports timestamps until 2038 (0x7fffffff) 12:50:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x89e0, &(0x7f000006fe80)={0x0, [], 0x0, "d429e9309fa18f"}) 12:50:01 executing program 2: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000fff004cce0308000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010003000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c25d77b5596168a060c8e016b222f3410015c9800a7900800000ee71ec113fe2d83413f728081c00000100df71"]) 12:50:01 executing program 3: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) 12:50:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x4000000000000015, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2) 12:50:01 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}}], 0x28}, 0x0) [ 51.916805][ T5143] loop2: detected capacity change from 0 to 131456 12:50:01 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) 12:50:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x89e0, &(0x7f000006fe80)={0x0, [], 0x0, "d429e9309fa18f"}) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}}], 0x28}, 0x0) 12:50:01 executing program 3: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 51.957476][ T5143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e800e018, mo2=0006] [ 51.988472][ T5143] System zones: 1-2, 19-19, 35-38, 46-46 [ 51.996407][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 12:50:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x89e0, &(0x7f000006fe80)={0x0, [], 0x0, "d429e9309fa18f"}) 12:50:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x4000000000000015, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2) 12:50:01 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 52.007226][ T5143] ext4 filesystem being mounted at /root/syzkaller-testdir262183813/syzkaller.R1jh4l/21/file0 supports timestamps until 2038 (0x7fffffff) 12:50:01 executing program 2: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000fff004cce0308000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010003000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00c25d77b5596168a060c8e016b222f3410015c9800a7900800000ee71ec113fe2d83413f728081c00000100df71"]) 12:50:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 12:50:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}}], 0x28}, 0x0) 12:50:01 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0) 12:50:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)) 12:50:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 12:50:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}}], 0x28}, 0x0) 12:50:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x7) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x0, 0x0) 12:50:02 executing program 0: inotify_init1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x230181, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/packet\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000001b80)={0x7f}, 0x0, 0x0) 12:50:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)) 12:50:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100), 0x4) 12:50:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) [ 52.148323][ T5196] loop2: detected capacity change from 0 to 131456 [ 52.180939][ T5196] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.205718][ T5196] ext4 filesystem being mounted at /root/syzkaller-testdir262183813/syzkaller.R1jh4l/22/file0 supports timestamps until 2038 (0x7fffffff) 12:50:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x7) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x0, 0x0) 12:50:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)) 12:50:02 executing program 0: inotify_init1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x230181, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/packet\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000001b80)={0x7f}, 0x0, 0x0) 12:50:02 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x25, 0x0) 12:50:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018400), 0x1, 0x0) 12:50:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="433900009919da078a0098d16ee0a593b040f7629100f06ee04fa447a3ba82583a96ea57ff22ea97be19af3deba01419cd2386ad591576000000007312339b2e45335c46c8b969166c4c2a97ac2b7f0fb4aabebae8dc5dffbcd48a70012173d6efa56b60f48cf0c9d0989ecbbfc220bd2bc1d68e9ac5b2695dd75b2a399c49d339df101a4f29107c42c16986300a780dd6e6bda906c695dbc77073a0757ed829db1e797c23bb3bc62747f7417d674be84b0555b3a5f09edd4d3d23fb5f6e4bfd7bf509201603fda5f9b3b22018b3fe5c657c6914aa0570819b73452abdf40a37ae0000000000000000007b1e430cb6cead02d3b2d13965f16360316bfc8fe6b75e042a27591882f47b673572116bae79ffc521bc970459e53afaed1404d59aa5d4da1186b3bd5aea683c6844bfd6f74e094ef1c96225e4177a0467acf7fc99d4954854c4a5a0ca083233675e32744b195d78c2ea36af62ba1e36b9a452f0e3f232285a3a4e3c2cda866514ace502d082cad3931989a50cf69dacae28334f12fda0d122dcc9c61150602c10053e01"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 12:50:02 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x25, 0x0) 12:50:02 executing program 0: inotify_init1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x230181, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/packet\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000001b80)={0x7f}, 0x0, 0x0) 12:50:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)) 12:50:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x7) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x0, 0x0) 12:50:02 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:50:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018400), 0x1, 0x0) 12:50:02 executing program 0: inotify_init1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x230181, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/packet\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000001b80)={0x7f}, 0x0, 0x0) 12:50:02 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x25, 0x0) 12:50:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x135807, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x66, &(0x7f0000000100)) 12:50:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x7) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x0, 0x0) 12:50:02 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a02, 0x0) sendfile(r2, r1, 0x0, 0x10007ffff003) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r2}], 0x1, &(0x7f0000000400)={0x0, r3+60000000}, 0x0, 0x0) 12:50:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018400), 0x1, 0x0) [ 52.421456][ T5257] netlink: 41562 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000200), 0x0) 12:50:02 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x25, 0x0) 12:50:02 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:50:02 executing program 5: r0 = syz_io_uring_setup(0x252d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x5}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000002380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x4335, 0x0, 0x0, 0x0, 0x0) 12:50:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000018400), 0x1, 0x0) [ 52.472593][ T5267] ======================================================= [ 52.472593][ T5267] WARNING: The mand mount option has been deprecated and [ 52.472593][ T5267] and is ignored by this kernel. Remove the mand [ 52.472593][ T5267] option from the mount to silence this warning. [ 52.472593][ T5267] ======================================================= [ 52.501148][ T5278] netlink: 41562 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:02 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 12:50:02 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:50:02 executing program 5: r0 = syz_io_uring_setup(0x252d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x5}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000002380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x4335, 0x0, 0x0, 0x0, 0x0) [ 52.586778][ T5294] netlink: 41562 bytes leftover after parsing attributes in process `syz-executor.3'. [ 52.612170][ T25] audit: type=1326 audit(1630414202.495:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.647705][ T5267] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 52.658601][ T25] audit: type=1326 audit(1630414202.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.688995][ T5302] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 52.691097][ T25] audit: type=1326 audit(1630414202.525:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=325 compat=0 ip=0x4665f9 code=0x7ffc0000 12:50:02 executing program 5: r0 = syz_io_uring_setup(0x252d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x5}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000002380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x4335, 0x0, 0x0, 0x0, 0x0) 12:50:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) [ 52.730394][ T25] audit: type=1326 audit(1630414202.525:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.755111][ T25] audit: type=1326 audit(1630414202.525:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.783863][ T25] audit: type=1326 audit(1630414202.525:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.810737][ T25] audit: type=1326 audit(1630414202.525:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 52.834779][ T25] audit: type=1326 audit(1630414202.525:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5290 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 12:50:02 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a02, 0x0) sendfile(r2, r1, 0x0, 0x10007ffff003) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r2}], 0x1, &(0x7f0000000400)={0x0, r3+60000000}, 0x0, 0x0) 12:50:02 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 12:50:02 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:50:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x135807, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x66, &(0x7f0000000100)) 12:50:02 executing program 5: r0 = syz_io_uring_setup(0x252d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_NOP={0x0, 0x5}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000002380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x4335, 0x0, 0x0, 0x0, 0x0) 12:50:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) 12:50:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000004efc0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f1c0)={0x0, [], 0x0, "3c8c2b848601b3"}) fallocate(r1, 0x1, 0x1008, 0x28120001) 12:50:03 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 12:50:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000180007041dfffd946f610500020000e8020408011001080008001e000200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 53.059267][ T5331] netlink: 41562 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.070720][ T25] audit: type=1326 audit(1630414202.955:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 53.075376][ T5330] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 12:50:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) 12:50:03 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) [ 53.145645][ T25] audit: type=1326 audit(1630414202.985:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5320 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=325 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 53.179251][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.179770][ C1] sd 0:0:1:0: tag#1929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 53.198293][ C1] sd 0:0:1:0: tag#1929 CDB: opcode=0xe5 (vendor) [ 53.204663][ C1] sd 0:0:1:0: tag#1929 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 53.213713][ C1] sd 0:0:1:0: tag#1929 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 53.222755][ C1] sd 0:0:1:0: tag#1929 CDB[20]: ba 12:50:03 executing program 0: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a02, 0x0) sendfile(r2, r1, 0x0, 0x10007ffff003) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r2}], 0x1, &(0x7f0000000400)={0x0, r3+60000000}, 0x0, 0x0) 12:50:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000180007041dfffd946f610500020000e8020408011001080008001e000200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 53.245411][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) 12:50:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x135807, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x66, &(0x7f0000000100)) [ 53.318734][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r2, 0xbe3d5ea7e9718f79}, 0x14}}, 0x0) 12:50:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000180007041dfffd946f610500020000e8020408011001080008001e000200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 53.373726][ T5372] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 53.432092][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:03 executing program 5: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x135807, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x66, &(0x7f0000000100)) 12:50:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r2, 0xbe3d5ea7e9718f79}, 0x14}}, 0x0) 12:50:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000180007041dfffd946f610500020000e8020408011001080008001e000200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 12:50:03 executing program 0: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a02, 0x0) sendfile(r2, r1, 0x0, 0x10007ffff003) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r2}], 0x1, &(0x7f0000000400)={0x0, r3+60000000}, 0x0, 0x0) [ 53.591569][ C1] sd 0:0:1:0: tag#1932 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 53.601444][ C1] sd 0:0:1:0: tag#1932 CDB: opcode=0xe5 (vendor) [ 53.607813][ C1] sd 0:0:1:0: tag#1932 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 53.616847][ C1] sd 0:0:1:0: tag#1932 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 53.625887][ C1] sd 0:0:1:0: tag#1932 CDB[20]: ba 12:50:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r2, 0xbe3d5ea7e9718f79}, 0x14}}, 0x0) 12:50:03 executing program 1: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f000000d740)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) [ 53.694409][ T5402] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 53.698501][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:50:03 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x6) 12:50:03 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r2, 0xbe3d5ea7e9718f79}, 0x14}}, 0x0) 12:50:03 executing program 1: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f000000d740)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x4) 12:50:03 executing program 5: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 1: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f000000d740)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x4) 12:50:03 executing program 0: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x4) 12:50:04 executing program 5: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 1: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) execve(&(0x7f000000d740)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x4) [ 54.557131][ T5497] ================================================================== [ 54.565212][ T5497] BUG: KCSAN: data-race in io_clean_op / kiocb_done [ 54.571784][ T5497] [ 54.574127][ T5497] write to 0xffff88810968fa58 of 4 bytes by task 5491 on cpu 1: [ 54.581842][ T5497] io_clean_op+0x3aa/0x3e0 [ 54.586245][ T5497] io_req_task_complete+0xb2/0x1e0 [ 54.591332][ T5497] tctx_task_work+0x233/0x490 [ 54.595986][ T5497] task_work_run+0xae/0x130 [ 54.600465][ T5497] exit_to_user_mode_prepare+0xf8/0x190 [ 54.605996][ T5497] syscall_exit_to_user_mode+0x20/0x40 [ 54.611432][ T5497] do_syscall_64+0x49/0x90 [ 54.615826][ T5497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.621699][ T5497] [ 54.624001][ T5497] read to 0xffff88810968fa58 of 4 bytes by task 5497 on cpu 0: [ 54.631514][ T5497] kiocb_done+0x30b/0x5a0 [ 54.635821][ T5497] io_issue_sqe+0x4ec7/0x6270 [ 54.640480][ T5497] io_wq_submit_work+0xf5/0x2c0 [ 54.645322][ T5497] io_worker_handle_work+0x97d/0xba0 [ 54.650585][ T5497] io_wqe_worker+0x184/0x4b0 12:50:04 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x6) 12:50:04 executing program 0: r0 = syz_io_uring_setup(0x123f, &(0x7f0000000080), &(0x7f0000621000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x2ccb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x534c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x250d, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 12:50:04 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101", 0xa9, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getdents(r0, &(0x7f0000000200)=""/108, 0x18) [ 54.655153][ T5497] ret_from_fork+0x1f/0x30 [ 54.659550][ T5497] [ 54.661850][ T5497] value changed: 0x00180300 -> 0x00110100 [ 54.667624][ T5497] [ 54.669921][ T5497] Reported by Kernel Concurrency Sanitizer on: [ 54.676060][ T5497] CPU: 0 PID: 5497 Comm: iou-wrk-5491 Tainted: G W 5.14.0-syzkaller #0 [ 54.685572][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.695615][ T5497] ================================================================== 12:50:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) [ 54.745623][ T5502] loop1: detected capacity change from 0 to 224 [ 54.751985][ T5505] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 12:50:04 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fd0208000301080008000600fe7f0000", 0x24}], 0x1}, 0x0) 12:50:04 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101", 0xa9, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getdents(r0, &(0x7f0000000200)=""/108, 0x18) 12:50:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) 12:50:04 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:04 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fd0208000301080008000600fe7f0000", 0x24}], 0x1}, 0x0) [ 54.884460][ T5536] loop1: detected capacity change from 0 to 224 12:50:05 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x6) 12:50:05 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:05 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fd0208000301080008000600fe7f0000", 0x24}], 0x1}, 0x0) 12:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) 12:50:05 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101", 0xa9, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getdents(r0, &(0x7f0000000200)=""/108, 0x18) 12:50:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, "03f84bffff00"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 12:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) close(r0) 12:50:05 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fd0208000301080008000600fe7f0000", 0x24}], 0x1}, 0x0) 12:50:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, "03f84bffff00"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 12:50:05 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {0x0, 0x7fff}, 0x0, 0x6}) [ 55.618070][ T5573] loop1: detected capacity change from 0 to 224 12:50:05 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101", 0xa9, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getdents(r0, &(0x7f0000000200)=""/108, 0x18) 12:50:05 executing program 5: socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @private2, 0x7}, 0x1c) r5 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) fchdir(r5) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r3) [ 55.742246][ T5602] loop1: detected capacity change from 0 to 224 [ 55.774159][ T5594] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 12:50:06 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x6) 12:50:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, "03f84bffff00"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 12:50:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {0x0, 0x7fff}, 0x0, 0x6}) 12:50:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0xff, 0x3) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/81) 12:50:06 executing program 1: setresgid(0xee01, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) setresgid(0x0, 0x0, 0x0) 12:50:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {0x0, 0x7fff}, 0x0, 0x6}) 12:50:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, "03f84bffff00"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 12:50:06 executing program 1: setresgid(0xee01, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) setresgid(0x0, 0x0, 0x0) 12:50:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0xff, 0x3) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/81) 12:50:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {0x0, 0x7fff}, 0x0, 0x6}) 12:50:06 executing program 1: setresgid(0xee01, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) setresgid(0x0, 0x0, 0x0) 12:50:06 executing program 5: socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @private2, 0x7}, 0x1c) r5 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) fchdir(r5) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r3) 12:50:07 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 12:50:07 executing program 2: io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r0, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000140)}, 0x0, 0x0]) 12:50:07 executing program 1: setresgid(0xee01, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) setresgid(0x0, 0x0, 0x0) 12:50:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0xff, 0x3) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/81) 12:50:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0xff, 0x3) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/81) 12:50:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:07 executing program 5: socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @private2, 0x7}, 0x1c) r5 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) fchdir(r5) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r3) [ 57.367130][ T5666] 9pnet: Could not find request transport: rdma 12:50:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) [ 57.447400][ T5683] 9pnet: Could not find request transport: rdma [ 57.494948][ T5687] __nla_validate_parse: 1 callbacks suppressed [ 57.494959][ T5687] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. 12:50:08 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 12:50:08 executing program 2: io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r0, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000140)}, 0x0, 0x0]) 12:50:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = dup3(r5, r3, 0x0) pidfd_send_signal(r6, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x1a}, 0x0) 12:50:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:08 executing program 5: socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x1, @private2, 0x7}, 0x1c) r5 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) fchdir(r5) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r3) [ 58.229310][ T5712] 9pnet: Could not find request transport: rdma [ 58.253598][ T5715] 9pnet: Could not find request transport: rdma 12:50:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000915000/0x2000)=nil, 0x2000, 0x6) 12:50:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:08 executing program 2: io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r0, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000140)}, 0x0, 0x0]) [ 58.301477][ T5726] 9pnet: Could not find request transport: rdma 12:50:08 executing program 4: r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\'\x00') [ 58.345476][ T5733] 9pnet: Could not find request transport: rdma 12:50:08 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 12:50:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000915000/0x2000)=nil, 0x2000, 0x6) 12:50:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=rdma,', {}, 0x2c, {[{@common=@version_9p2000}, {@common=@msize={'msize', 0x3d, 0xba}}]}}) 12:50:08 executing program 2: io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r0, 0x3, &(0x7f0000001280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000140)}, 0x0, 0x0]) 12:50:08 executing program 4: r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\'\x00') 12:50:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000915000/0x2000)=nil, 0x2000, 0x6) 12:50:09 executing program 4: r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\'\x00') [ 59.089203][ T5761] 9pnet: Could not find request transport: rdma 12:50:09 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) 12:50:09 executing program 4: r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\'\x00') 12:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x10000072d9, 0x0, 0x0, 0x0, 0x0, 0x8000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26be}) 12:50:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000915000/0x2000)=nil, 0x2000, 0x6) 12:50:09 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x100014, 0x1000f1}, 0x20) 12:50:09 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 12:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x10000072d9, 0x0, 0x0, 0x0, 0x0, 0x8000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26be}) 12:50:09 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) 12:50:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 12:50:09 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) 12:50:09 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x100014, 0x1000f1}, 0x20) 12:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x10000072d9, 0x0, 0x0, 0x0, 0x0, 0x8000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26be}) 12:50:09 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) 12:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x10000072d9, 0x0, 0x0, 0x0, 0x0, 0x8000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26be}) 12:50:09 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) 12:50:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 12:50:09 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x100014, 0x1000f1}, 0x20) [ 59.977317][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 59.977328][ T25] audit: type=1326 audit(1630414209.859:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5799 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 12:50:10 executing program 5: r0 = epoll_create(0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 12:50:10 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x100014, 0x1000f1}, 0x20) 12:50:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) 12:50:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 12:50:10 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 12:50:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x25, 0x20000000, 0x0, 0x0) 12:50:10 executing program 5: r0 = epoll_create(0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 12:50:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 12:50:10 executing program 2: name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)=@fuse_with_parent={0x18}, &(0x7f0000000240), 0x1400) 12:50:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x25, 0x20000000, 0x0, 0x0) [ 60.819100][ T25] audit: type=1326 audit(1630414210.702:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5838 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 12:50:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) 12:50:10 executing program 5: r0 = epoll_create(0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 12:50:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x25, 0x20000000, 0x0, 0x0) 12:50:10 executing program 2: name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)=@fuse_with_parent={0x18}, &(0x7f0000000240), 0x1400) 12:50:10 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dc7a) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000fcffffffffffffff03003e00000800000000000000000000400000000000000000000000000000000000000000003800020000000101000003"], 0x3b0) close(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x400017e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12:50:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) [ 60.911560][ T25] audit: type=1326 audit(1630414210.791:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5867 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 60.987947][ T25] audit: type=1326 audit(1630414210.861:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5884 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 12:50:11 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 12:50:11 executing program 5: r0 = epoll_create(0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 12:50:11 executing program 2: name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)=@fuse_with_parent={0x18}, &(0x7f0000000240), 0x1400) 12:50:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x25, 0x20000000, 0x0, 0x0) 12:50:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dc7a) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000fcffffffffffffff03003e00000800000000000000000000400000000000000000000000000000000000000000003800020000000101000003"], 0x3b0) close(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x400017e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12:50:11 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[], 0x53) 12:50:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)=@ethtool_sfeatures}) 12:50:11 executing program 2: name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)=@fuse_with_parent={0x18}, &(0x7f0000000240), 0x1400) [ 61.684760][ T1345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=1345 comm=kworker/1:3 12:50:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dc7a) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000fcffffffffffffff03003e00000800000000000000000000400000000000000000000000000000000000000000003800020000000101000003"], 0x3b0) close(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x400017e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12:50:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)=@ethtool_sfeatures}) [ 61.732317][ C0] sd 0:0:1:0: tag#1965 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 61.742201][ C0] sd 0:0:1:0: tag#1965 CDB: opcode=0xe5 (vendor) [ 61.748613][ C0] sd 0:0:1:0: tag#1965 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 61.757840][ C0] sd 0:0:1:0: tag#1965 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 61.766924][ C0] sd 0:0:1:0: tag#1965 CDB[20]: ba 12:50:11 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/77, 0x4d) [ 61.775223][ T1345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=1345 comm=kworker/1:3 12:50:12 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 12:50:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[], 0x53) 12:50:12 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dc7a) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000fcffffffffffffff03003e00000800000000000000000000400000000000000000000000000000000000000000003800020000000101000003"], 0x3b0) close(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x400017e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12:50:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)=@ethtool_sfeatures}) 12:50:12 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/77, 0x4d) 12:50:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)=@ethtool_sfeatures}) [ 62.555395][ C0] sd 0:0:1:0: tag#1966 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 62.565264][ C0] sd 0:0:1:0: tag#1966 CDB: opcode=0xe5 (vendor) [ 62.571598][ C0] sd 0:0:1:0: tag#1966 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 62.580646][ C0] sd 0:0:1:0: tag#1966 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 62.589727][ C0] sd 0:0:1:0: tag#1966 CDB[20]: ba 12:50:12 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/77, 0x4d) 12:50:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) [ 62.609483][ T1347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=1347 comm=kworker/0:3 12:50:12 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/77, 0x4d) [ 62.694440][ C1] sd 0:0:1:0: tag#1968 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 62.701322][ C0] sd 0:0:1:0: tag#1967 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 62.704382][ C1] sd 0:0:1:0: tag#1968 CDB: opcode=0xe5 (vendor) [ 62.714175][ C0] sd 0:0:1:0: tag#1967 CDB: opcode=0xe5 (vendor) [ 62.720475][ C1] sd 0:0:1:0: tag#1968 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 62.726793][ C0] sd 0:0:1:0: tag#1967 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 12:50:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[], 0x53) [ 62.735787][ C1] sd 0:0:1:0: tag#1968 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 62.744793][ C0] sd 0:0:1:0: tag#1967 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 62.753786][ C1] sd 0:0:1:0: tag#1968 CDB[20]: ba [ 62.767921][ C0] sd 0:0:1:0: tag#1967 CDB[20]: ba [ 62.786968][ T1347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=1347 comm=kworker/0:3 12:50:13 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 12:50:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[], 0x53) 12:50:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) [ 63.424991][ C0] sd 0:0:1:0: tag#1969 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 63.427127][ C1] sd 0:0:1:0: tag#1970 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 63.434840][ C0] sd 0:0:1:0: tag#1969 CDB: opcode=0xe5 (vendor) [ 63.444629][ C1] sd 0:0:1:0: tag#1970 CDB: opcode=0xe5 (vendor) [ 63.444643][ C1] sd 0:0:1:0: tag#1970 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 63.444660][ C1] sd 0:0:1:0: tag#1970 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 63.450967][ C0] sd 0:0:1:0: tag#1969 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 63.457264][ C1] sd 0:0:1:0: tag#1970 CDB[20]: ba [ 63.466263][ C0] sd 0:0:1:0: tag#1969 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 63.498402][ C0] sd 0:0:1:0: tag#1969 CDB[20]: ba [ 63.512502][ T1347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=1347 comm=kworker/0:3 12:50:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:13 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:50:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) [ 63.609348][ C1] sd 0:0:1:0: tag#1971 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 63.619228][ C1] sd 0:0:1:0: tag#1971 CDB: opcode=0xe5 (vendor) [ 63.625587][ C1] sd 0:0:1:0: tag#1971 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 63.634646][ C1] sd 0:0:1:0: tag#1971 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 63.643722][ C1] sd 0:0:1:0: tag#1971 CDB[20]: ba 12:50:13 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:50:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) [ 63.723478][ C1] sd 0:0:1:0: tag#1972 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 63.733328][ C1] sd 0:0:1:0: tag#1972 CDB: opcode=0xe5 (vendor) [ 63.734961][ C0] sd 0:0:1:0: tag#1973 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 63.739654][ C1] sd 0:0:1:0: tag#1972 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 63.739671][ C1] sd 0:0:1:0: tag#1972 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 63.749481][ C0] sd 0:0:1:0: tag#1973 CDB: opcode=0xe5 (vendor) 12:50:13 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 63.758482][ C1] sd 0:0:1:0: tag#1972 CDB[20]: ba [ 63.767483][ C0] sd 0:0:1:0: tag#1973 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 63.787915][ C0] sd 0:0:1:0: tag#1973 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 63.796986][ C0] sd 0:0:1:0: tag#1973 CDB[20]: ba 12:50:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:14 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1f7fffd, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0002005}) 12:50:14 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:50:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7fffffff, @empty, 0x1000}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = gettid() tkill(r8, 0x1e) 12:50:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 12:50:14 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x598, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 12:50:14 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x598, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) [ 64.299909][ C1] sd 0:0:1:0: tag#1974 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 64.309774][ C1] sd 0:0:1:0: tag#1974 CDB: opcode=0xe5 (vendor) [ 64.316112][ C1] sd 0:0:1:0: tag#1974 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 64.325178][ C1] sd 0:0:1:0: tag#1974 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 64.334227][ C1] sd 0:0:1:0: tag#1974 CDB[20]: ba 12:50:14 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1f7fffd, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0002005}) 12:50:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) [ 64.353097][ T25] audit: type=1400 audit(1630414214.203:30): avc: denied { block_suspend } for pid=6106 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 12:50:14 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x598, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 12:50:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 12:50:14 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000001b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80) 12:50:14 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1f7fffd, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0002005}) 12:50:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6(0xa, 0x100000003, 0x3b) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 12:50:14 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x598, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 12:50:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 12:50:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='status\x00') rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000000)="26da454442dc2500008020c48139f6c6c4e3a56ca80b000000fff3430f6f0742dff441cd48400f1bce260f15c7c4219d64add98e8d6c", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) read$rfkill(r0, &(0x7f0000000180), 0x11d) 12:50:14 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) clone(0x69882380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:50:14 executing program 3: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) 12:50:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6(0xa, 0x100000003, 0x3b) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 12:50:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000004c40)={&(0x7f0000004900)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20040000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x5411, &(0x7f0000000000))