0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="27c6c06a2c0f3a46ef620f34cd439a020227", 0x12}, {&(0x7f00000000c0)="5e30283f913820023645f8d18ae8455374ee18c08393", 0x16}], 0x2}, 0x0) 13:30:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="01430fd7336a472b6cc0b704c9cfc03812af7a1026a9a16b03ad45eeab2dcb9f783bc95a919ccb12974c7c1da4510e5d88c42f25d5c48845d3336d39b81ed2ca3b57b20c0084", 0x46}, {&(0x7f00000001c0)="4e19c7b0be447c4f2490da8f3d3460a1a243be897a8684a597fd7e89163448afa86493938cdfc72a38126da1e70666d57e52156dcf337375820a7622eed17cf3a9ed981cc65dbe471b42e93c1ce1fc616e5ff700ce4f0903a1927d4f057fb55406d54986c676e7df987326cfae7a1ebdfe7c139fb6db70e5bfdb5dce45d7c20d", 0x80}, {&(0x7f00000000c0)="7dca", 0x2}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="22b31ec304d5e8961488578ced97262df580d3557f46dab5191d2b06ab517e8cbc64986c95eaf8ba3082b3142fab4bcaaf2c68a85ae2f254d42f85120adff0c46bfa60e73d499de8cc8d3989ef55e854bc2cfe9d24e90a8031fc16177a1ee749db66a78ba78d90d5e9180ae3403525bf4890d37d4963ebc4b5a61c378bbaaa9006005dfd74381f8f9ff9f97a53f650040f43f26ec8b9ea9f9b", 0x99}, {&(0x7f0000001340)="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", 0x553}], 0x2}}], 0x2, 0x0) 13:30:23 executing program 3: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(r0, 0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x0) 13:30:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="66530700ae010090f8e93b24000100000000000069be6d05c404486978bd7630527b3acc9cb1101b", 0x28}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendto$inet6(r0, &(0x7f0000001a40)="c5370050f09158871cd49cea0a3100649d2400b0b068e021fe3d9b8274f52518470d43322421a37a19a9171dca793c8b1488474972ef5987d1118aeb9d678a92fb86788bd9", 0x45, 0x604c800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:30:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="27c6c06a2c0f3a46ef620f34cd439a020227", 0x12}, {&(0x7f00000000c0)="5e30283f913820023645f8d18ae8455374ee18c08393", 0x16}], 0x2}, 0x0) 13:30:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="66530700ae010090f8e93b24000100000000000069be6d05c404486978bd7630527b3acc9cb1101b", 0x28}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:23 executing program 3: r0 = creat(&(0x7f0000000700)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x10, 0x7fffffffefff) 13:30:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="27c6c06a2c0f3a46ef620f34cd439a020227", 0x12}, {&(0x7f00000000c0)="5e30283f913820023645f8d18ae8455374ee18c08393", 0x16}], 0x2}, 0x0) 13:30:23 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0xffff, 0x4) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:30:26 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x1a0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) utime(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 13:30:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="27c6c06a2c0f3a46ef620f34cd439a020227", 0x12}, {&(0x7f00000000c0)="5e30283f913820023645f8d18ae8455374ee18c08393", 0x16}], 0x2}, 0x0) 13:30:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x2}, {0x35}, {0x6, 0x0, 0x0, 0x7fffff7a}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 13:30:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendto$inet6(r0, &(0x7f0000001a40)="c5370050f09158871cd49cea0a3100649d2400b0b068e021fe3d9b8274f52518470d43322421a37a19a9171dca793c8b1488474972ef5987d1118aeb9d678a92fb86788bd9", 0x45, 0x604c800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:30:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="ab", 0x1}], 0x1) 13:30:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}}, 0x0) write$binfmt_elf64(r2, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 13:30:26 executing program 5: setrlimit(0x7, &(0x7f0000000440)={0x0, 0x200000000000}) 13:30:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000280)=0x7, 0x4) 13:30:26 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0xc0042, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r2, &(0x7f00000000c0)={0xb}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 13:30:26 executing program 5: mount$9p_unix(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={'trans=unix,', {[{@mmap}]}}) 13:30:26 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019400)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000380)="598542348925bad0d8813ff3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:30:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x300}}) 13:30:26 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x1a0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) utime(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 13:30:26 executing program 1: setreuid(0xee01, 0xee00) syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') 13:30:26 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x101b42, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000001700)="cd", 0x1}], 0x1) 13:30:26 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="16ce6adf", 0x4, 0x0, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 13:30:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendto$inet6(r0, &(0x7f0000001a40)="c5370050f09158871cd49cea0a3100649d2400b0b068e021fe3d9b8274f52518470d43322421a37a19a9171dca793c8b1488474972ef5987d1118aeb9d678a92fb86788bd9", 0x45, 0x604c800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:30:26 executing program 1: mq_open(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0, 0x0) 13:30:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0xdca59dd50ac60b1d, 0x0, 0x0, {{}, {@val={0x8, 0x67}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 13:30:26 executing program 5: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x10000, &(0x7f00000014c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_destroy(r0) 13:30:26 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) ppoll(&(0x7f0000001180)=[{}, {r0}, {}], 0x3, &(0x7f00000011c0)={0x0, 0x6}, 0x0, 0x0) 13:30:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) io_uring_setup(0x45db, &(0x7f00000009c0)) 13:30:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x149142) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x70, 0x8, 0x3ff, 0x20, "3f50167f7d387c06da2c19f08a50a400c3891ee29639a67ed7611e721ab7f60e"}) 13:30:29 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) 13:30:29 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_mount_image$vfat(0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="68b23e73800a3d3621061a1d5a68e8ab77350403c5c336982b7dda533f732257cd4a72f0183adb1f3fbbf686a39c1af5a6f1f044e8daf888bc46", 0x3a}, {&(0x7f0000000100)="b2bcb0524ecf0474b7b08ab534879e31c6d79e08ca115029c8314f7979fde1c689b2359aed52b0550f776d19846b47ddf468178ae7485ee2b23df7db4623ae9a43970236c54ee28d6f69db57207b93c86ad6b88774f95d4d378668f702ce9bdbeed8c0895bd922f2d65367ce75d2d0509a509a3ba6f89a3379293e5fc7ff630c", 0x80, 0x468}, {&(0x7f0000000180)="232504b911f07d540bdd83bde11a699152d1fc004d4ecfeecdc6de59abdf0f1d4f0054c24352b9c712ba1f1a502f3a14b9b3f4c5167af33218269c38dd865ddef6e7c27700fa9a6e93608c928d41ee5d5fba6a0c391856caf4d314e9c39567af4e56b54dec", 0x65}, {&(0x7f0000000200)="7f38e544879754c3ec5633473c007c3bd9c7258664f7b86f3b31fbb901af667254d02303e77a52aa70f3ab79b068fc6cf5245bd4b7539a19566b68bf90ff0a33ee9c0f020df653148cf5c608ff233fa60ada51eff9a9a2", 0x57, 0x9ce6}, {&(0x7f0000000280)="57f9940814caa4bcf1b54835f6b097bc84d3cac1b19a0e697f477bf4abfa1b3cf485b231b8985a6772d360a63f88252ab3d214b19a740a6201d9ce998e8970fd06d4c98b35cd68fd1fcb2b595bc6680eec7a57f10ebcbdbc2e53cc1e78f3b62df4ca56bb8bb926e95e50f704c3167c7e0593", 0x72}, {&(0x7f0000000700)="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", 0x1ef}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="29389be30de7672de078a8eff29a988f615b7e73ceee85e6244d77ddf6d9665c85db8a2967642e60662b81cc7de3918d5504c5be43f088e26798f1ae2b5689edb96fc2fa8dd446b816fc5abfe47405b7591990ece5df45e160f4e3535942e7af0efb1efc80e82f91e951b801ad92930769b3b7eb64398613f8dcb4707799c9dbc26c058c", @ANYBLOB="e85904728dba708b0a4e331aca315c7fe0cf19d6e4204802de185b846f55da7a6759034fc1b3d9d81ccde2d9577085b7c1c9a9203dbeea994e9e65dfdfb57eedbb48bd6d0600000000000000e700ddab9e7250e2"]) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000002a40)=""/4112, 0x1010}], 0x1, 0x0, 0x0) 13:30:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendto$inet6(r0, &(0x7f0000001a40)="c5370050f09158871cd49cea0a3100649d2400b0b068e021fe3d9b8274f52518470d43322421a37a19a9171dca793c8b1488474972ef5987d1118aeb9d678a92fb86788bd9", 0x45, 0x604c800, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:30:29 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x1a0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) utime(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 13:30:29 executing program 5: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x10000, &(0x7f00000014c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_destroy(r0) 13:30:29 executing program 4: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 13:30:29 executing program 3: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, 0x0) 13:30:29 executing program 4: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 13:30:29 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="361d0720000000003e4525"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xf, &(0x7f00000002c0)) 13:30:29 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="361d0720000000003e4525"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xf, &(0x7f00000002c0)) 13:30:29 executing program 4: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 13:30:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000100000001000000000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000180)) 13:30:29 executing program 5: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x10000, &(0x7f00000014c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_destroy(r0) 13:30:29 executing program 4: unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 13:30:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x0, 0x19}) 13:30:29 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x1a0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) utime(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 13:30:29 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="361d0720000000003e4525"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xf, &(0x7f00000002c0)) 13:30:29 executing program 3: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) epoll_create(0x9) unshare(0x400) pselect6(0x40, &(0x7f0000000000)={0x7}, 0x0, &(0x7f0000000040)={0x1ff}, 0x0, 0x0) 13:30:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x17, &(0x7f0000000000)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x18) 13:30:29 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 13:30:29 executing program 5: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x10000, &(0x7f00000014c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) io_destroy(r0) 13:30:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x5d7) read(r3, &(0x7f0000000000)=""/23, 0x1001) fcntl$setpipe(r4, 0x407, 0x0) dup2(r1, r2) 13:30:29 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="361d0720000000003e4525"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xf, &(0x7f00000002c0)) 13:30:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0xffffffffffffffff) [ 887.158415][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 887.158438][ C0] sd 0:0:1:0: tag#271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 887.174798][ C0] sd 0:0:1:0: tag#271 CDB: opcode=0xe5 (vendor) [ 887.181047][ C0] sd 0:0:1:0: tag#271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 887.190005][ C0] sd 0:0:1:0: tag#271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 887.198973][ C0] sd 0:0:1:0: tag#271 CDB[20]: ba 13:30:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 13:30:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 13:30:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040), 0x4) 13:30:30 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='h', 0x20000041}], 0x1, 0x0, 0x0, 0x0) 13:30:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x7, 0x4) 13:30:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="7e2cfa8a37935d0569a203153f3c144d", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000002c0)) 13:30:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000019400)=""/4096, 0x1000) [ 887.984483][ C0] sd 0:0:1:0: tag#272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 887.994240][ C0] sd 0:0:1:0: tag#272 CDB: opcode=0xe5 (vendor) [ 888.000496][ C0] sd 0:0:1:0: tag#272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.009442][ C0] sd 0:0:1:0: tag#272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.018408][ C0] sd 0:0:1:0: tag#272 CDB[20]: ba 13:30:30 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 13:30:30 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_SET_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x6) 13:30:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) 13:30:30 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f099f3580c82835e0098276a7eab393f401cc0fa92e236c6239690f9834415b771b53a8d24d87e76223cd82", 0xeb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x5d7) read(r3, &(0x7f0000000000)=""/23, 0x1001) fcntl$setpipe(r4, 0x407, 0x0) dup2(r1, r2) [ 888.074050][ T6858] 9pnet: p9_fd_create_tcp (6858): problem connecting socket to 127.0.0.1 [ 888.074535][ T6902] 9pnet: p9_fd_create_tcp (6902): problem connecting socket to 127.0.0.1 [ 888.125792][ C0] sd 0:0:1:0: tag#273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 888.135651][ C0] sd 0:0:1:0: tag#273 CDB: opcode=0xe5 (vendor) [ 888.141921][ C0] sd 0:0:1:0: tag#273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.150874][ C0] sd 0:0:1:0: tag#273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.159825][ C0] sd 0:0:1:0: tag#273 CDB[20]: ba 13:30:30 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d033c3d7483e774d0e0d0f5de6a1153d930302cf5210b8049e103e382c8a69dd9351c07e4c4a51f631df2724b512550d9187396c8140663e39603a8f91aa2ebf5e1b1cf3be7e92a61b227c4a3c2a78fa9f5f47022a20d82b2521e8fb5adf2c1342493d02ecf776f03e8d7e4c6dc57ce33979f32cd3930c1e92da9a44bc2afbcd70456ea40570000000000000000000000000000969816be205072fb556c585ec83565b060b3291f3ea65e25eb2808891ae0228aa0536ba7da2a21257bffd0cbb3cc2e84a4632c965c9e736f3a2e974b2530c42d0d7fb717bb3c2fb3036fcbfdf17e760d436411a1d93e94d241bb010d6b05eb0470734e53078e42ebd3a40d701eff1273165c1f1bce86bf286a0eb1d083d98d2222dcf340252b960c20fbc706dfa3b08eaa91e4dbe5789e8179279abb72181d8efc05582501000000000000009d966216eb313b923b19e59a4e51"]) 13:30:30 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d033c3d7483e774d0e0d0f5de6a1153d930302cf5210b8049e103e382c8a69dd9351c07e4c4a51f631df2724b512550d9187396c8140663e39603a8f91aa2ebf5e1b1cf3be7e92a61b227c4a3c2a78fa9f5f47022a20d82b2521e8fb5adf2c1342493d02ecf776f03e8d7e4c6dc57ce33979f32cd3930c1e92da9a44bc2afbcd70456ea40570000000000000000000000000000969816be205072fb556c585ec83565b060b3291f3ea65e25eb2808891ae0228aa0536ba7da2a21257bffd0cbb3cc2e84a4632c965c9e736f3a2e974b2530c42d0d7fb717bb3c2fb3036fcbfdf17e760d436411a1d93e94d241bb010d6b05eb0470734e53078e42ebd3a40d701eff1273165c1f1bce86bf286a0eb1d083d98d2222dcf340252b960c20fbc706dfa3b08eaa91e4dbe5789e8179279abb72181d8efc05582501000000000000009d966216eb313b923b19e59a4e51"]) 13:30:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, 0x0, 0x0) 13:30:30 executing program 2: io_setup(0x81, &(0x7f0000000180)=0x0) r1 = epoll_create(0x516) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) [ 888.173388][ T6911] 9pnet: p9_fd_create_tcp (6911): problem connecting socket to 127.0.0.1 [ 888.211389][ C0] sd 0:0:1:0: tag#274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 888.221182][ C0] sd 0:0:1:0: tag#274 CDB: opcode=0xe5 (vendor) [ 888.224156][ C1] sd 0:0:1:0: tag#275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 888.227469][ C0] sd 0:0:1:0: tag#274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.237182][ C1] sd 0:0:1:0: tag#275 CDB: opcode=0xe5 (vendor) [ 888.246078][ C0] sd 0:0:1:0: tag#274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.252389][ C1] sd 0:0:1:0: tag#275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.261320][ C0] sd 0:0:1:0: tag#274 CDB[20]: ba [ 888.270226][ C1] sd 0:0:1:0: tag#275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.284180][ C1] sd 0:0:1:0: tag#275 CDB[20]: ba 13:30:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0xac}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) open(&(0x7f0000000080)='./bus\x00', 0x2040, 0x0) 13:30:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, 0x0, 0x0) 13:30:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, 0x0, 0x0) 13:30:31 executing program 2: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:30:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f099f3580c82835e0098276a7eab393f401cc0fa92e236c6239690f9834415b771b53a8d24d87e76223cd8243f9404b60339b", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, 0x0, 0x0) 13:30:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0xee01, 0x0) 13:30:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x5d7) read(r3, &(0x7f0000000000)=""/23, 0x1001) fcntl$setpipe(r4, 0x407, 0x0) dup2(r1, r2) 13:30:31 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 13:30:31 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 13:30:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40505330, &(0x7f0000001440)={0x2fe}) 13:30:31 executing program 5: r0 = io_uring_setup(0x3743, &(0x7f00000009c0)={0x0, 0xaefb}) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x400ff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13:30:31 executing program 2: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:30:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10000, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x5d7) read(r3, &(0x7f0000000000)=""/23, 0x1001) fcntl$setpipe(r4, 0x407, 0x0) dup2(r1, r2) [ 889.035901][ T6923] 9pnet: p9_fd_create_tcp (6923): problem connecting socket to 127.0.0.1 [ 889.036847][ T6924] 9pnet: p9_fd_create_tcp (6924): problem connecting socket to 127.0.0.1 [ 889.073866][ C0] sd 0:0:1:0: tag#276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:30:31 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") [ 889.083633][ C0] sd 0:0:1:0: tag#276 CDB: opcode=0xe5 (vendor) [ 889.089875][ C0] sd 0:0:1:0: tag#276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 889.098849][ C0] sd 0:0:1:0: tag#276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 889.107827][ C0] sd 0:0:1:0: tag#276 CDB[20]: ba 13:30:31 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") 13:30:31 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") [ 889.144478][ C0] sd 0:0:1:0: tag#277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 889.154356][ C0] sd 0:0:1:0: tag#277 CDB: opcode=0xe5 (vendor) [ 889.160599][ C0] sd 0:0:1:0: tag#277 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 889.169655][ C0] sd 0:0:1:0: tag#277 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 889.169674][ C0] sd 0:0:1:0: tag#277 CDB[20]: ba [ 889.179372][ T6982] 9pnet: p9_fd_create_tcp (6982): problem connecting socket to 127.0.0.1 13:30:31 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") 13:30:31 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") 13:30:31 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") 13:30:32 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 13:30:32 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) 13:30:32 executing program 0: pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000014c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400), 0x1}) 13:30:32 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x36}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xf2, 0x4, 0x4, 0x0, 0x0, "6fae988388f1830b7868ed74cf22f367fe9c8e", 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x8, 0x0, 0xff}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000300)) clone(0x30810000, &(0x7f0000000280)="85861f39c3fb4e0636887774962fed9b587cc1fb22658a3f932407d464099bb7b74e095f9830551b0a87c70300780c13167553558c1b6caa4b330b06545d3bdbea78d74bcf1b7eb5d4ff1942738a604ad59d5277127fbeff257216ec706bc7f4834721d16fdd2f69278d894f0a5a9df047e0603ed2bd2d745eaf7d9f2c943f", &(0x7f0000000340), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0xcb, 0x20, 0xa370}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xed, 0x40, 0x3, 0x0, 0x0, 0x8, 0x2004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6aa, 0x4, @perf_bp={&(0x7f0000000400), 0x7}, 0x800, 0x9, 0xcc, 0x4, 0x51, 0x3, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r1, 0x5) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="4fb29e42a6660f2e9a8e7a84d597507d1e5504ec4a") 13:30:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x10, 0x11}}], 0x10}}], 0x2, 0x0) 13:30:32 executing program 2: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:30:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xe, 0x0, 0x20) 13:30:32 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) [ 889.900228][ T6968] 9pnet: p9_fd_create_tcp (6968): problem connecting socket to 127.0.0.1 13:30:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006a3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) [ 889.973844][ C0] sd 0:0:1:0: tag#278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 889.983619][ C0] sd 0:0:1:0: tag#278 CDB: opcode=0xe5 (vendor) [ 889.989859][ C0] sd 0:0:1:0: tag#278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 889.998904][ C0] sd 0:0:1:0: tag#278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 890.008206][ C0] sd 0:0:1:0: tag#278 CDB[20]: ba 13:30:32 executing program 3: unshare(0x22000600) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 13:30:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x334}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00']}, 0x378) dup2(r0, r1) 13:30:32 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x7, 0x0) getdents64(r0, 0x0, 0x0) 13:30:32 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/126) [ 890.020802][ T7028] 9pnet: p9_fd_create_tcp (7028): problem connecting socket to 127.0.0.1 13:30:32 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/126) 13:30:32 executing program 3: mkdir(&(0x7f0000000140)='./bus\x00', 0x12a) r0 = open(0x0, 0xccc83, 0x32) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x200000, 0x0) unshare(0x8000400) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x1, 0x7ff, 0x9, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x40c0017) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) clock_gettime(0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x3938700}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000009c0)=ANY=[@ANYBLOB="7d000000000000009009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/3016]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x4000680) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xe8, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e0000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6070dc33}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "f4dcf194dcbb501d30e5cb418271da73dd49404be3e213c555a3f09223a42d735de19de7a6d7a829386a80d6e32d60218d58520dfe01acab3af3d1"}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40005}, 0x4006810) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 13:30:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006a3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) 13:30:32 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/126) 13:30:32 executing program 2: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:30:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006a3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) 13:30:35 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) 13:30:35 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/126) 13:30:35 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 13:30:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x334}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00']}, 0x378) dup2(r0, r1) 13:30:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006a3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) 13:30:35 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000004c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/12, 0xc}], 0x1) 13:30:35 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xb3ffffff) 13:30:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c030024, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000000040)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000580)=ANY=[]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'L+'}, 0x16, 0x1) 13:30:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x0, 0x1, 0x7fffffffffffffff, 0x6}) 13:30:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x45}, {0x45}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:30:35 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xb3ffffff) 13:30:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x334}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00']}, 0x378) dup2(r0, r1) [ 893.092595][ T7106] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 893.156831][ T7116] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 13:30:38 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) 13:30:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103}, 0x20) 13:30:38 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x34, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 13:30:38 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xb3ffffff) 13:30:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x334}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00']}, 0x378) dup2(r0, r1) 13:30:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@rand_addr=0xe0000000, @private}, 0x8) 13:30:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) r2 = syz_io_uring_setup(0x2726, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 13:30:38 executing program 0: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x0, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, 0x0, 0x78) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x7ff, 0x3) 13:30:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 13:30:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) r2 = syz_io_uring_setup(0x2726, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 896.078353][ T7132] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 13:30:38 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xb3ffffff) 13:30:38 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f0000000b80)="c4ca9107787b049ef7a22899f37ba7baaadb20df2275d8c7d89e896abedc792bfbd41b0658be8de570563117df5cb67142572be0875d0403c85be3ba6ea87b9071d13caf06b156b50f3ad6692657402264c5cd34d30a608ee50cfd06a4a8f1687d6db00e0d7aee7b01badd5398c5c29a22000000000086aa58704ef1396e1a3a0644b8da530666f60759df3f00b99ae36fa5912b00b47b85dccf550edc915802c1d1f92af621a6ea21188d2179bd6023e04d77f3a0fea56d8f2600bdf8ee1b7126e58db8cdddce574ca79f10a8a3dc88bfc6fd4344d22abe89d38447d046f584c6d9a778531d02ef4b4b46d2217d25039606ec132d174b124de261ee4715a6cb0daf247a98b38cc353ab3371daa0366a2b146c5a91629c36fd6644e767afff74412137700a4ce0541b945190cd5101e130bcb26e5289f6674ee38c9ebee8ed66da59a4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 896.127034][ C1] sd 0:0:1:0: tag#266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 896.136944][ C1] sd 0:0:1:0: tag#266 CDB: opcode=0xe5 (vendor) [ 896.143199][ C1] sd 0:0:1:0: tag#266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 896.152160][ C1] sd 0:0:1:0: tag#266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 896.161115][ C1] sd 0:0:1:0: tag#266 CDB[20]: ba [ 896.180266][ T7159] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 13:30:41 executing program 0: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x0, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, 0x0, 0x78) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x7ff, 0x3) 13:30:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) r2 = syz_io_uring_setup(0x2726, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 13:30:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a000121"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000004, 0x0) 13:30:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b05f00000000000000273ed348f17d114b654b4908cc914fdf92a78be9e57737dd49b9ffe619071af915a186a07f61f9751e73954266e5ff4c56445a5db132cd47d0643fe3ba28041e814be3843325acfd", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 13:30:41 executing program 5: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=@dstopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0]}}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58) 13:30:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 13:30:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shutdown(r1, 0x0) r2 = syz_io_uring_setup(0x2726, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 13:30:41 executing program 5: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=@dstopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0]}}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58) 13:30:41 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f0000000b80)="c4ca9107787b049ef7a22899f37ba7baaadb20df2275d8c7d89e896abedc792bfbd41b0658be8de570563117df5cb67142572be0875d0403c85be3ba6ea87b9071d13caf06b156b50f3ad6692657402264c5cd34d30a608ee50cfd06a4a8f1687d6db00e0d7aee7b01badd5398c5c29a22000000000086aa58704ef1396e1a3a0644b8da530666f60759df3f00b99ae36fa5912b00b47b85dccf550edc915802c1d1f92af621a6ea21188d2179bd6023e04d77f3a0fea56d8f2600bdf8ee1b7126e58db8cdddce574ca79f10a8a3dc88bfc6fd4344d22abe89d38447d046f584c6d9a778531d02ef4b4b46d2217d25039606ec132d174b124de261ee4715a6cb0daf247a98b38cc353ab3371daa0366a2b146c5a91629c36fd6644e767afff74412137700a4ce0541b945190cd5101e130bcb26e5289f6674ee38c9ebee8ed66da59a4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 899.098440][ C0] sd 0:0:1:0: tag#267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 899.108227][ C0] sd 0:0:1:0: tag#267 CDB: opcode=0xe5 (vendor) [ 899.114488][ C0] sd 0:0:1:0: tag#267 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 899.123440][ C0] sd 0:0:1:0: tag#267 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 899.132386][ C0] sd 0:0:1:0: tag#267 CDB[20]: ba 13:30:41 executing program 2: sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0xd4}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)=ANY=[], 0x20) 13:30:41 executing program 5: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=@dstopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0]}}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58) 13:30:41 executing program 0: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x0, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, 0x0, 0x78) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x7ff, 0x3) 13:30:41 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x200000000000) 13:30:41 executing program 5: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=@dstopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0]}}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58) 13:30:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 899.295154][ C0] sd 0:0:1:0: tag#268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 899.304931][ C0] sd 0:0:1:0: tag#268 CDB: opcode=0xe5 (vendor) [ 899.311206][ C0] sd 0:0:1:0: tag#268 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 899.320157][ C0] sd 0:0:1:0: tag#268 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 899.329113][ C0] sd 0:0:1:0: tag#268 CDB[20]: ba 13:30:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4}, {0x4}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 13:30:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc95, 0x81}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b05f00000000000000273ed348f17d114b654b4908cc914fdf92a78be9e57737dd49b9ffe619071af915a186a07f61f9751e73954266e5ff4c56445a5db132cd47d0643fe3ba28041e814be3843325acfd", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 13:30:44 executing program 0: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x0, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, 0x0, 0x78) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x7ff, 0x3) 13:30:44 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 902.115852][ C1] sd 0:0:1:0: tag#286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 902.125637][ C1] sd 0:0:1:0: tag#286 CDB: opcode=0xe5 (vendor) [ 902.131893][ C1] sd 0:0:1:0: tag#286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 902.140863][ C1] sd 0:0:1:0: tag#286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 902.149802][ C1] sd 0:0:1:0: tag#286 CDB[20]: ba 13:30:44 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f0000000b80)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:30:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x2}, 0x20) 13:30:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc95, 0x81}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc95, 0x81}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x2}, 0x20) 13:30:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x2}, 0x20) 13:30:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f099f3580c82835e0098276a7eab393f401cc0fa92e236c6239690f9834415b771b53a8d24d87e76223cd8243f9404b60339beb1d44387c4f046a728a384bfd01", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc95, 0x81}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc028020", 0x39) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 13:30:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="66530700ae897094e7b126b097eaa769be6ddbf5ffff074cfdaa4e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b58773c9c9e707a923579cf44d73f5298acb6572779559dd899a2eaf88e75c3f8f70205fa56799a256484261c9f4b3534e1734", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:30:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x2}, 0x20) [ 902.394231][ T7271] netlink: 798 bytes leftover after parsing attributes in process `syz-executor.2'. 13:30:47 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b05f00000000000000273ed348f17d114b654b4908cc914fdf92a78be9e57737dd49b9ffe619071af915a186a07f61f9751e73954266e5ff4c56445a5db132cd47d0643fe3ba28041e814be3843325acfd", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 13:30:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) setrlimit(0x0, &(0x7f0000000100)) 13:30:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f00000000c0)) 13:30:47 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f0000000b80)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:30:47 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:30:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6f401, 0x0) 13:30:47 executing program 0: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0x7, 0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 13:30:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x70) 13:30:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x30, &(0x7f0000000140)="8d310783156939000000e28c0b1dd2a357cd64c8743d94b946cf885a21539a0c4a081ceea597cc0a8320fab2d67a9268"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) 13:30:47 executing program 2: unshare(0x28020600) r0 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000240)) 13:30:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r0}) 13:30:48 executing program 2: unshare(0x28020600) r0 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000240)) 13:30:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x400454a4, &(0x7f0000000040)) 13:30:50 executing program 2: unshare(0x28020600) r0 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000240)) 13:30:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b05f00000000000000273ed348f17d114b654b4908cc914fdf92a78be9e57737dd49b9ffe619071af915a186a07f61f9751e73954266e5ff4c56445a5db132cd47d0643fe3ba28041e814be3843325acfd", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 13:30:50 executing program 2: unshare(0x28020600) r0 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000240)) 13:30:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:30:50 executing program 5: clock_adjtime(0x0, &(0x7f00000000c0)={0x133}) 13:30:50 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0xe0001, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)={0xd84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x30, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="aa"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0xd28, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe1, 0x0, "6899889dee60a5dd2e1ff1f8a786dc4dfa351640ab33af578e0ed3a48f3a31bbdd54a11a0dde97ed6f78192cd694dff9a70476bb05164d7e70b9f4c2b2725b5ea0e0bada5fb54f2f31a4c3add83f682e983bac17ca6de2ef2c1458d873a670bd121ff57bc7cf23e3b34c4f54b2f6d7c13d0d419e76828b01953a0e676fa89bd90227ead4b6506d246cab66902f50187ab12a8e901b7f1ce5fb3f367b26ce3eaa494f4f480b48edab86dd76deefdc0fa3649f41e1e59c48f3d3b077e15cd4248d77c54b1a4e3993cb66950aaa18a0b62592fc89d98c690c3f9e9b3f2570"}, @NL80211_BAND_5GHZ={0xc3d, 0x1, "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"}]}]}, 0xd84}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40009, 0x0) 13:30:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syncfs(r0) 13:30:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000000)) 13:30:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:51 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) [ 908.305531][ C0] sd 0:0:1:0: tag#288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 908.315941][ C0] sd 0:0:1:0: tag#288 CDB: opcode=0xe5 (vendor) [ 908.322197][ C0] sd 0:0:1:0: tag#288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 908.331152][ C0] sd 0:0:1:0: tag#288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 908.340099][ C0] sd 0:0:1:0: tag#288 CDB[20]: ba 13:30:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@private0}, 0x8, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 13:30:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syncfs(r0) 13:30:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:53 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="a84f09ac0d0025ebb334a1"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:30:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9dec]}, 0x8, 0x800) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000040)) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x222102, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@version_u}, {@cache_mmap}], [{@subj_type={'subj_type', 0x3d, '#'}}, {@obj_role={'obj_role', 0x3d, '-\\-/+^(/]/'}}]}}) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x40400) close(r2) r3 = accept4(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80, 0x80000) pread64(r3, &(0x7f0000000300)=""/208, 0xd0, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={'\x00', 0x2, 0x101, 0x5, 0xac0, 0xf7ea, r5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r4, 0x688f2000) r6 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000004c0)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x90002, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x6, 0x8, 0x80000001, 0x0, 0xffff, r5}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x8, 0x6, 0x0, 0x2, 0xfffffffffffffffa}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 13:30:53 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00009e5000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f000032a000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000865000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 13:30:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 13:30:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 13:30:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x7a, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x0, [{@multicast1}, {@dev}]}, @rr={0x7, 0x7, 0x0, [@rand_addr]}]}}}], 0x40}, 0x0) 13:30:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') [ 911.185725][ C1] sd 0:0:1:0: tag#265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 911.195508][ C1] sd 0:0:1:0: tag#265 CDB: opcode=0xe5 (vendor) [ 911.201786][ C1] sd 0:0:1:0: tag#265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 911.210755][ C1] sd 0:0:1:0: tag#265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 911.219710][ C1] sd 0:0:1:0: tag#265 CDB[20]: ba 13:30:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syncfs(r0) 13:30:53 executing program 5: openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xfffffffffffffffb) 13:30:53 executing program 2: pipe2$9p(0x0, 0xc000) [ 911.312870][ C1] sd 0:0:1:0: tag#307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 911.322649][ C1] sd 0:0:1:0: tag#307 CDB: opcode=0xe5 (vendor) [ 911.328872][ C1] sd 0:0:1:0: tag#307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 911.337801][ C1] sd 0:0:1:0: tag#307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 911.346734][ C1] sd 0:0:1:0: tag#307 CDB[20]: ba 13:30:54 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056300)={0x0, [], 0x4, "5dc0586eabafcf"}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x11244aff860102b8) 13:30:54 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:54 executing program 5: setrlimit(0x6, &(0x7f0000002cc0)) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4f96, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:30:54 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000400)={&(0x7f0000001800)=""/4096, 0x1000}) 13:30:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x110}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:30:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syncfs(r0) 13:30:54 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:54 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x4c, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) 13:30:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b05f00000000000000273ed348f17d114b654b4908cc914fdf92a78be9e57737dd49b9ffe619071af915a186a07f61f9751e73954266e5ff4c56445a5db132cd47d0643fe3ba28041e814be3843325acfd2ad1048c949e1ae0cdccb3b2f2fbd149e11b73f4e0b5dfafabea5950c0727af7a8ea109974686795373ae802d9631b5e74a77f05940430fa5154b945ea232ee9ac89d547bc3bd8fa59e84a80f2", 0xa9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) [ 911.520862][ C0] sd 0:0:1:0: tag#288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 911.525911][ T7385] io-wq is not configured for unbound workers [ 911.530633][ C0] sd 0:0:1:0: tag#288 CDB: opcode=0xe5 (vendor) [ 911.542939][ C0] sd 0:0:1:0: tag#288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 911.551889][ C0] sd 0:0:1:0: tag#288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 911.560847][ C0] sd 0:0:1:0: tag#288 CDB[20]: ba 13:30:54 executing program 2: r0 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 13:30:55 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000400)={&(0x7f0000001800)=""/4096, 0x1000}) 13:30:55 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:55 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:55 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:55 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:55 executing program 1: prlimit64(0x0, 0x2, &(0x7f0000000080)={0x80000, 0xffffeffffffffffd}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff9000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x3000)=nil) [ 912.627398][ T7467] mmap: syz-executor.1 (7467): VmData 29126656 exceed data ulimit 524288. Update limits or use boot option ignore_rlimit_data. 13:30:55 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/255, 0xff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)) tkill(r0, 0x7) 13:30:55 executing program 2: setuid(0xee00) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 13:30:55 executing program 1: setreuid(0x0, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 13:30:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001740)="2400000052001f0014f9f407000904010200071004000100ff09bc8cc61b859b5f000000", 0x24) 13:30:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00b6e29031974a59c9eaeb"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:30:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 13:30:55 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000400)={&(0x7f0000001800)=""/4096, 0x1000}) 13:30:55 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 13:30:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x2020, 0x4) r1 = memfd_create(&(0x7f0000000080)='#:\xf0\x13\a\x909I\xab:o\xcb.\x96\x05}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x84\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00D\xe7\xd32\x02\x8e\x96\xb7=\xb9OmILO\x8d\x10\x00\x00\x00\x00\xfe\x00\x00\x00\x92[\xbe<\xbe\xb7\xee\xd1RT\x85wL\x9a\x9d\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xffIJ\x8a\xb5\x0e\xeah\x9d\r\xe8^V\x85\x9f\x8a\xce\xe6\xb7\xc49[y\xc4\xb9;\xe4\x17\xc3W\'\xc2\xeex\xf4\xe0\x02) \x1bAL6\x82x\xac\xcf\xc1\xe4\x03J\xc0\xc1\x94\x15\b\xec6\x90C\xc5\x91\x06q\xf2zrH\xef\x8b\xc3\xd4\xf9\xb06\xb3\x11\xc5V\xab\xc9\xb7\xc1X\xe2\xee(\x91\xc1\x0098\xc6\x12\x98O7Y\x8e\xed\xdc\xa9\x1ae\xfe\x83\x87\r\xd5\x14\x1b\x89\xe4\x00\xb4\xf9=\x05[\xef\x8a\f\xb6^\xe3x1T\x14\x02\x19M\xe3\x0f\v\x85\x91\xbf\xaaW\xba\x99V1\x15\x94\xa2$\xfd \x8d\x99\xea\v\x05\xe6\xa2Y\xf6\xb3\x7f\x93\x97\xde\xa9>\x19\xf8\x18\x92\xf8d\xd8l\xdd\xb1U\xbfD\"Z\x8a#\xb8\xb9a\x16\x05\xecW\xc5\xf9\"2\xe8e1\xb4\x87G\x14L9\xc4\xfa\xaeAV', 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x3) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 13:30:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="290000002500190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 13:30:55 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa2, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 13:30:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=@raw={0x4, 0x0, {'O'}}, 0x0) 13:30:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) 13:30:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x2020, 0x4) r1 = memfd_create(&(0x7f0000000080)='#:\xf0\x13\a\x909I\xab:o\xcb.\x96\x05}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x84\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00D\xe7\xd32\x02\x8e\x96\xb7=\xb9OmILO\x8d\x10\x00\x00\x00\x00\xfe\x00\x00\x00\x92[\xbe<\xbe\xb7\xee\xd1RT\x85wL\x9a\x9d\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xffIJ\x8a\xb5\x0e\xeah\x9d\r\xe8^V\x85\x9f\x8a\xce\xe6\xb7\xc49[y\xc4\xb9;\xe4\x17\xc3W\'\xc2\xeex\xf4\xe0\x02) \x1bAL6\x82x\xac\xcf\xc1\xe4\x03J\xc0\xc1\x94\x15\b\xec6\x90C\xc5\x91\x06q\xf2zrH\xef\x8b\xc3\xd4\xf9\xb06\xb3\x11\xc5V\xab\xc9\xb7\xc1X\xe2\xee(\x91\xc1\x0098\xc6\x12\x98O7Y\x8e\xed\xdc\xa9\x1ae\xfe\x83\x87\r\xd5\x14\x1b\x89\xe4\x00\xb4\xf9=\x05[\xef\x8a\f\xb6^\xe3x1T\x14\x02\x19M\xe3\x0f\v\x85\x91\xbf\xaaW\xba\x99V1\x15\x94\xa2$\xfd \x8d\x99\xea\v\x05\xe6\xa2Y\xf6\xb3\x7f\x93\x97\xde\xa9>\x19\xf8\x18\x92\xf8d\xd8l\xdd\xb1U\xbfD\"Z\x8a#\xb8\xb9a\x16\x05\xecW\xc5\xf9\"2\xe8e1\xb4\x87G\x14L9\xc4\xfa\xaeAV', 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x3) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 13:30:55 executing program 3: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/rcu_expedited', 0x1, 0x0) 13:30:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)={0x18, 0x69, 0xa21a0ff0c61f0d83, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) [ 913.219638][ T7504] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 13:30:55 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {r3}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {r2, r4}], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000060dc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) [ 913.309125][ C0] sd 0:0:1:0: tag#271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 913.318983][ C0] sd 0:0:1:0: tag#271 CDB: opcode=0xe5 (vendor) [ 913.325239][ C0] sd 0:0:1:0: tag#271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 913.334180][ C0] sd 0:0:1:0: tag#271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 913.343113][ C0] sd 0:0:1:0: tag#271 CDB[20]: ba [ 913.349361][ C1] sd 0:0:1:0: tag#272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 913.359138][ C1] sd 0:0:1:0: tag#272 CDB: opcode=0xe5 (vendor) [ 913.365428][ C1] sd 0:0:1:0: tag#272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 913.374485][ C1] sd 0:0:1:0: tag#272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 913.383449][ C1] sd 0:0:1:0: tag#272 CDB[20]: ba 13:30:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 13:30:56 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000400)={&(0x7f0000001800)=""/4096, 0x1000}) 13:30:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x2020, 0x4) r1 = memfd_create(&(0x7f0000000080)='#:\xf0\x13\a\x909I\xab:o\xcb.\x96\x05}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x84\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00D\xe7\xd32\x02\x8e\x96\xb7=\xb9OmILO\x8d\x10\x00\x00\x00\x00\xfe\x00\x00\x00\x92[\xbe<\xbe\xb7\xee\xd1RT\x85wL\x9a\x9d\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xffIJ\x8a\xb5\x0e\xeah\x9d\r\xe8^V\x85\x9f\x8a\xce\xe6\xb7\xc49[y\xc4\xb9;\xe4\x17\xc3W\'\xc2\xeex\xf4\xe0\x02) \x1bAL6\x82x\xac\xcf\xc1\xe4\x03J\xc0\xc1\x94\x15\b\xec6\x90C\xc5\x91\x06q\xf2zrH\xef\x8b\xc3\xd4\xf9\xb06\xb3\x11\xc5V\xab\xc9\xb7\xc1X\xe2\xee(\x91\xc1\x0098\xc6\x12\x98O7Y\x8e\xed\xdc\xa9\x1ae\xfe\x83\x87\r\xd5\x14\x1b\x89\xe4\x00\xb4\xf9=\x05[\xef\x8a\f\xb6^\xe3x1T\x14\x02\x19M\xe3\x0f\v\x85\x91\xbf\xaaW\xba\x99V1\x15\x94\xa2$\xfd \x8d\x99\xea\v\x05\xe6\xa2Y\xf6\xb3\x7f\x93\x97\xde\xa9>\x19\xf8\x18\x92\xf8d\xd8l\xdd\xb1U\xbfD\"Z\x8a#\xb8\xb9a\x16\x05\xecW\xc5\xf9\"2\xe8e1\xb4\x87G\x14L9\xc4\xfa\xaeAV', 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x3) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 13:30:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:30:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d7", 0x1}], 0x1) 13:30:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x10}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) 13:30:56 executing program 3: set_mempolicy(0x4003, &(0x7f0000000000)=0xe99, 0x9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 13:30:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x2020, 0x4) r1 = memfd_create(&(0x7f0000000080)='#:\xf0\x13\a\x909I\xab:o\xcb.\x96\x05}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x84\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00D\xe7\xd32\x02\x8e\x96\xb7=\xb9OmILO\x8d\x10\x00\x00\x00\x00\xfe\x00\x00\x00\x92[\xbe<\xbe\xb7\xee\xd1RT\x85wL\x9a\x9d\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xffIJ\x8a\xb5\x0e\xeah\x9d\r\xe8^V\x85\x9f\x8a\xce\xe6\xb7\xc49[y\xc4\xb9;\xe4\x17\xc3W\'\xc2\xeex\xf4\xe0\x02) \x1bAL6\x82x\xac\xcf\xc1\xe4\x03J\xc0\xc1\x94\x15\b\xec6\x90C\xc5\x91\x06q\xf2zrH\xef\x8b\xc3\xd4\xf9\xb06\xb3\x11\xc5V\xab\xc9\xb7\xc1X\xe2\xee(\x91\xc1\x0098\xc6\x12\x98O7Y\x8e\xed\xdc\xa9\x1ae\xfe\x83\x87\r\xd5\x14\x1b\x89\xe4\x00\xb4\xf9=\x05[\xef\x8a\f\xb6^\xe3x1T\x14\x02\x19M\xe3\x0f\v\x85\x91\xbf\xaaW\xba\x99V1\x15\x94\xa2$\xfd \x8d\x99\xea\v\x05\xe6\xa2Y\xf6\xb3\x7f\x93\x97\xde\xa9>\x19\xf8\x18\x92\xf8d\xd8l\xdd\xb1U\xbfD\"Z\x8a#\xb8\xb9a\x16\x05\xecW\xc5\xf9\"2\xe8e1\xb4\x87G\x14L9\xc4\xfa\xaeAV', 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x3) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 13:30:56 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xe9, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee6c4252493d2834faafc1f2169271f1ec5721a6535c16009b43a7efe7"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:30:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x47f, 0x0, 0x0, 0x3, 0x0, "145a0d9a270e68db"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa) 13:30:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x39, 0x0, 0x0) 13:30:56 executing program 3: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 13:30:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 13:30:57 executing program 3: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 13:30:57 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xe8}) open(&(0x7f0000000000)='./file0\x00', 0xe0000, 0x0) 13:30:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x10001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 13:30:57 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa5, &(0x7f00000001c0)="8de208f1679d9126a25750cb0700edff5f83f3cf09690f0800000076751e446ce6709eb1c5850000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:30:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001300)) 13:30:57 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0xa}}}, 0x4e}], [], 0xb}) 13:30:57 executing program 3: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 13:30:57 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) close(r0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5]F\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x14\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f9f765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = gettid() tkill(r2, 0x34) 13:30:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e6703004b654b49938ca8dbb8f8c44f7b7d9c40000000f0fa800000004f87cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05410f8226e", 0x4f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x5) 13:30:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001300)) [ 914.953309][ T7582] tmpfs: Bad value for 'mpol' [ 914.958642][ T7584] tmpfs: Bad value for 'mpol' 13:30:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x1d}, {0x2c}, {0x6}]}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) 13:30:58 executing program 3: perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 13:30:58 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x175, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:30:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f9f765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = gettid() tkill(r2, 0x34) 13:30:58 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001300)) 13:30:58 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 13:30:58 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x175, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:30:58 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001300)) 13:30:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f9f765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = gettid() tkill(r2, 0x34) 13:30:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000300)="900000001c001f4d154a817393278bff0a808f7802020000ec36710014000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa241fa18e9e0b39010d7cebf6f2cdabb54", 0x90, 0x0, 0x0, 0x0) 13:30:58 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 13:30:58 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x175, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:30:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000100)="00000002", 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000001c0)="23000000190007041dfffd942461050002000000fcc3953a1df7a8c5070016000400ff", 0x23}], 0x1}, 0x0) 13:30:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000101ff4f0000080800000200020000000c0019800800010004000000040001"], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '([[+(%,/@(\x05^\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44841}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x1, @empty, 0x28a8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb", 0x59, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f40b, 0x0) 13:30:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c466000002ed8e4f9f765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = gettid() tkill(r2, 0x34) 13:30:58 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x175, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:30:58 executing program 0: symlink(&(0x7f0000000140)='..', &(0x7f00000007c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) 13:30:58 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) [ 915.518448][ T7635] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. 13:30:58 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x69, 0x0, 0x66a) 13:30:58 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x8002, &(0x7f0000000100)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 13:30:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x1d}, {0x54}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:30:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x6, 0x0) 13:30:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = fork() kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 13:30:58 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) 13:30:58 executing program 5: set_mempolicy(0x3, &(0x7f0000000180)=0x200000000063, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0) [ 915.720655][ T7680] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 915.728080][ T7682] 9pnet_virtio: no channels available for device éq‰Y’3aK 13:31:01 executing program 5: set_mempolicy(0x3, &(0x7f0000000180)=0x200000000063, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0) 13:31:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001840)) 13:31:01 executing program 3: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f000053a000/0x4000)=nil, 0x4000, 0xa) 13:31:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x5, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0x70}}, 0x0) 13:31:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) fcntl$lock(r0, 0x35, &(0x7f0000000040)={0x0, 0x3, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap(&(0x7f000016b000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x247c5000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {r5, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {}, {}, {0x0}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {}, {r5}, {r4}, {r5, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r4}, {r4}, {}, {r4}, {r5, r6}, {}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {r4}, {}, {}, {r5}, {0x0, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {r4}, {}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, 0x0}, {0x0}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r16, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r17, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r20}, {0x0, r20}, {r19}, {r19}, {r19}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {r18, r20}, {}, {r15}, {r19, r10}, {}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {}, {0x0, r20}, {}, {}, {r18}, {0x0, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r19, r14}, {}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {r13}, {r19}, {r18}, {}, {0x0, r20}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {}, {r19}, {r18}, {}, {}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {}, {}, {0x0, r12}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {0x0, r20}, {r18}, {r19, r20}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {0x0, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r11, r20}, {r18, r20}, {r19}, {}, {r18, r20}, {r18}, {r19}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {r19, r20}, {}, {}, {r18, r20}, {}, {r19}, {r18}, {r19, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r18}, {}, {0x0, r9}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {}, {0x0, r20}, {r19}, {r7}, {}, {r18}, {}, {}, {}, {0x0, r20}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {r18}, {r19, r20}, {}, {r18}, {}, {r18}, {0x0, r20}, {r19}, {r18, r20}, {0x0, r20}, {}, {0x0, r20}, {}, {}, {}, {r19}, {r18}, {}, {}, {r19}, {0x0, r20}, {r19, r20}, {}, {}, {0x0, r20}, {}, {r19, r20}, {r18, r20}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {r19}, {0x0, r20}, {r18}, {r19}, {}, {}, {}, {r19}, {0x0, r20}, {}, {r18, r20}, {r18}, {}, {0x0, r20}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {}, {r19}, {r18, r20}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19}, {r19}, {}, {}, {0x0, r20}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r20}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000062040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r18}], 0x9, "2067012a5c539f"}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x104000, 0x0) 13:31:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d0d49188e23ea7e6cd526d966d43bd0209c400000000000000087cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e07fddb4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f3940956c5c6ba1cb34401e0b937e04fb3bf24cba6e191f4b54ad439b75045779fa02632e55d42e76179d2fb35945b591dc4898770dd2abc8191b2228308dbb1edf96", 0xc8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:01 executing program 5: set_mempolicy(0x3, &(0x7f0000000180)=0x200000000063, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0) [ 918.592808][ C1] sd 0:0:1:0: tag#257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 918.596506][ T7698] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 918.602689][ C1] sd 0:0:1:0: tag#257 CDB: opcode=0xe5 (vendor) [ 918.616185][ C1] sd 0:0:1:0: tag#257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 918.625129][ C1] sd 0:0:1:0: tag#257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 918.634106][ C1] sd 0:0:1:0: tag#257 CDB[20]: ba 13:31:01 executing program 4: r0 = syz_io_uring_setup(0x889, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x8, 0x0, 0x1) 13:31:01 executing program 5: set_mempolicy(0x3, &(0x7f0000000180)=0x200000000063, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0) [ 918.681281][ T7706] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 918.718469][ C1] sd 0:0:1:0: tag#258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:31:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d707265e665725d94656c617483766578c53a302d353a302f35"]) [ 918.728257][ C1] sd 0:0:1:0: tag#258 CDB: opcode=0xe5 (vendor) [ 918.734518][ C1] sd 0:0:1:0: tag#258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 918.743582][ C1] sd 0:0:1:0: tag#258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 918.752541][ C1] sd 0:0:1:0: tag#258 CDB[20]: ba [ 918.757073][ T7717] 9pnet_virtio: no channels available for device éq‰Y’3aK 13:31:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d0d49188e23ea7e6cd526d966d43bd0209c400000000000000087cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e07fddb4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f3940956c5c6ba1cb34401e0b937e04fb3bf24cba6e191f4b54ad439b75045779fa02632e55d42e76179d2fb35945b591dc4898770dd2abc8191b2228308dbb1edf96", 0xc8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:01 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) fcntl$lock(r0, 0x35, &(0x7f0000000040)={0x0, 0x3, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap(&(0x7f000016b000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x247c5000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {r5, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {}, {}, {0x0}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {}, {r5}, {r4}, {r5, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r4}, {r4}, {}, {r4}, {r5, r6}, {}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {r4}, {}, {}, {r5}, {0x0, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {r4}, {}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, 0x0}, {0x0}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r16, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r17, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r20}, {0x0, r20}, {r19}, {r19}, {r19}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {r18, r20}, {}, {r15}, {r19, r10}, {}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {}, {0x0, r20}, {}, {}, {r18}, {0x0, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r19, r14}, {}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {r13}, {r19}, {r18}, {}, {0x0, r20}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {}, {r19}, {r18}, {}, {}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {}, {}, {0x0, r12}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {0x0, r20}, {r18}, {r19, r20}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {0x0, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r11, r20}, {r18, r20}, {r19}, {}, {r18, r20}, {r18}, {r19}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {r19, r20}, {}, {}, {r18, r20}, {}, {r19}, {r18}, {r19, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r18}, {}, {0x0, r9}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {}, {0x0, r20}, {r19}, {r7}, {}, {r18}, {}, {}, {}, {0x0, r20}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {r18}, {r19, r20}, {}, {r18}, {}, {r18}, {0x0, r20}, {r19}, {r18, r20}, {0x0, r20}, {}, {0x0, r20}, {}, {}, {}, {r19}, {r18}, {}, {}, {r19}, {0x0, r20}, {r19, r20}, {}, {}, {0x0, r20}, {}, {r19, r20}, {r18, r20}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {r19}, {0x0, r20}, {r18}, {r19}, {}, {}, {}, {r19}, {0x0, r20}, {}, {r18, r20}, {r18}, {}, {0x0, r20}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {}, {r19}, {r18, r20}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19}, {r19}, {}, {}, {0x0, r20}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r20}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000062040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r18}], 0x9, "2067012a5c539f"}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x104000, 0x0) 13:31:01 executing program 5: set_mempolicy(0x1, &(0x7f0000000040)=0x1, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) [ 918.781787][ T7722] tmpfs: Bad value for 'mpol' [ 918.805211][ T7723] tmpfs: Bad value for 'mpol' [ 918.837896][ C0] sd 0:0:1:0: tag#259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 918.847709][ C0] sd 0:0:1:0: tag#259 CDB: opcode=0xe5 (vendor) [ 918.853980][ C0] sd 0:0:1:0: tag#259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 918.862957][ C0] sd 0:0:1:0: tag#259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 918.871917][ C0] sd 0:0:1:0: tag#259 CDB[20]: ba 13:31:01 executing program 3: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f000053a000/0x4000)=nil, 0x4000, 0xa) 13:31:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x2d}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='4', 0x1}], 0x1) 13:31:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 13:31:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d0d49188e23ea7e6cd526d966d43bd0209c400000000000000087cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e07fddb4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f3940956c5c6ba1cb34401e0b937e04fb3bf24cba6e191f4b54ad439b75045779fa02632e55d42e76179d2fb35945b591dc4898770dd2abc8191b2228308dbb1edf96", 0xc8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:02 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) fcntl$lock(r0, 0x35, &(0x7f0000000040)={0x0, 0x3, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap(&(0x7f000016b000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x247c5000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {r5, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {}, {}, {0x0}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {}, {r5}, {r4}, {r5, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r4}, {r4}, {}, {r4}, {r5, r6}, {}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {r4}, {}, {}, {r5}, {0x0, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {r4}, {}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, 0x0}, {0x0}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r16, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r17, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r20}, {0x0, r20}, {r19}, {r19}, {r19}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {r18, r20}, {}, {r15}, {r19, r10}, {}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {}, {0x0, r20}, {}, {}, {r18}, {0x0, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r19, r14}, {}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {r13}, {r19}, {r18}, {}, {0x0, r20}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {}, {r19}, {r18}, {}, {}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {}, {}, {0x0, r12}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {0x0, r20}, {r18}, {r19, r20}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {0x0, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r11, r20}, {r18, r20}, {r19}, {}, {r18, r20}, {r18}, {r19}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {r19, r20}, {}, {}, {r18, r20}, {}, {r19}, {r18}, {r19, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r18}, {}, {0x0, r9}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {}, {0x0, r20}, {r19}, {r7}, {}, {r18}, {}, {}, {}, {0x0, r20}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {r18}, {r19, r20}, {}, {r18}, {}, {r18}, {0x0, r20}, {r19}, {r18, r20}, {0x0, r20}, {}, {0x0, r20}, {}, {}, {}, {r19}, {r18}, {}, {}, {r19}, {0x0, r20}, {r19, r20}, {}, {}, {0x0, r20}, {}, {r19, r20}, {r18, r20}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {r19}, {0x0, r20}, {r18}, {r19}, {}, {}, {}, {r19}, {0x0, r20}, {}, {r18, r20}, {r18}, {}, {0x0, r20}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {}, {r19}, {r18, r20}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19}, {r19}, {}, {}, {0x0, r20}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r20}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000062040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r18}], 0x9, "2067012a5c539f"}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x104000, 0x0) 13:31:02 executing program 3: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f000053a000/0x4000)=nil, 0x4000, 0xa) 13:31:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) [ 919.686051][ C1] sd 0:0:1:0: tag#260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 919.695824][ C1] sd 0:0:1:0: tag#260 CDB: opcode=0xe5 (vendor) [ 919.696889][ T7751] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.702090][ C1] sd 0:0:1:0: tag#260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 919.720602][ C1] sd 0:0:1:0: tag#260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 919.729543][ C1] sd 0:0:1:0: tag#260 CDB[20]: ba 13:31:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:02 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) fcntl$lock(r0, 0x35, &(0x7f0000000040)={0x0, 0x3, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap(&(0x7f000016b000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x247c5000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {r5, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {}, {}, {0x0}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {}, {r5}, {r4}, {r5, r6}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r4}, {r4}, {}, {r4}, {r5, r6}, {}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {r4}, {}, {}, {r5}, {0x0, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {r4}, {}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, 0x0}, {0x0}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r16, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r17, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r20}, {0x0, r20}, {r19}, {r19}, {r19}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {r18, r20}, {}, {r15}, {r19, r10}, {}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {}, {0x0, r20}, {}, {}, {r18}, {0x0, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r19, r14}, {}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {r13}, {r19}, {r18}, {}, {0x0, r20}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {}, {r19}, {r18}, {}, {}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {}, {}, {0x0, r12}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r18}, {}, {}, {0x0, r20}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {0x0, r20}, {r18}, {r19, r20}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {}, {0x0, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r11, r20}, {r18, r20}, {r19}, {}, {r18, r20}, {r18}, {r19}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {r19, r20}, {}, {}, {r18, r20}, {}, {r19}, {r18}, {r19, r20}, {}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r18}, {}, {0x0, r9}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {}, {0x0, r20}, {r19}, {r7}, {}, {r18}, {}, {}, {}, {0x0, r20}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {r18}, {r19, r20}, {}, {r18}, {}, {r18}, {0x0, r20}, {r19}, {r18, r20}, {0x0, r20}, {}, {0x0, r20}, {}, {}, {}, {r19}, {r18}, {}, {}, {r19}, {0x0, r20}, {r19, r20}, {}, {}, {0x0, r20}, {}, {r19, r20}, {r18, r20}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {r19}, {0x0, r20}, {r18}, {r19}, {}, {}, {}, {r19}, {0x0, r20}, {}, {r18, r20}, {r18}, {}, {0x0, r20}, {}, {}, {}, {r18}, {0x0, r20}, {r18}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {}, {r19}, {r18, r20}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19}, {r19}, {}, {}, {0x0, r20}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r20}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000062040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r18}], 0x9, "2067012a5c539f"}) mlock2(&(0x7f0000000000/0x4000)=nil, 0x104000, 0x0) [ 919.874284][ C0] sd 0:0:1:0: tag#262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 919.884050][ C0] sd 0:0:1:0: tag#262 CDB: opcode=0xe5 (vendor) [ 919.890300][ C0] sd 0:0:1:0: tag#262 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 919.899363][ C0] sd 0:0:1:0: tag#262 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 919.908311][ C0] sd 0:0:1:0: tag#262 CDB[20]: ba 13:31:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3eb9}) 13:31:02 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 13:31:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) 13:31:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f0000000100)=ANY=[@ANYBLOB='gid']) 13:31:03 executing program 3: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800004, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f000053a000/0x4000)=nil, 0x4000, 0xa) [ 920.544685][ T7780] proc: Bad value for 'gid' [ 920.555406][ T7781] proc: Bad value for 'gid' 13:31:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d0d49188e23ea7e6cd526d966d43bd0209c400000000000000087cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e07fddb4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f3940956c5c6ba1cb34401e0b937e04fb3bf24cba6e191f4b54ad439b75045779fa02632e55d42e76179d2fb35945b591dc4898770dd2abc8191b2228308dbb1edf96", 0xc8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="0100000000000500080000008e", 0xd, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900)) 13:31:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:05 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x19c, &(0x7f0000000300)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee6c4252493d2834faafc1f2169271f1ec5721a6535c16009b43a7efe75322cf3af1d7b48e23185ebf24de7024f010eb56a4d9e6c86f8b507139aea1d0a9590f61c9fe3cc9ffb1e33c047bf53b8bf2ecbaac21c4843235354b7c3f948a5cd67acc8eeed21b4499f259f73ff434c441fd21e9c4ddfbd559baefc62efc3ae274f098f10222fc40f339cac4fdad51fee5f4116c740b74b806e53317f9aae46c1b42b73394b20602bb3abb579b69a00526d284042e68f0acec3371e9bf9ca72f8bafe90fa3954342b3c040149142be605a6a"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:05 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="860c3fe93c1242f4e7b126b297eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d9c40000000ffffffe687cfac79b04c2e1fea", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) 13:31:05 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x19c, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:05 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:31:05 executing program 0: setreuid(0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee01) r0 = fork() setreuid(0xee01, 0x0) prlimit64(r0, 0x0, 0x0, 0x0) 13:31:05 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x19c, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:05 executing program 2: syz_open_procfs(0x0, 0x0) epoll_create(0x7a42) 13:31:05 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x19c, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:06 executing program 0: setreuid(0xee00, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 13:31:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003f00)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 13:31:06 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/50, 0x32, 0x7) 13:31:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2102, 0x0, 0x0) 13:31:06 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x80000000}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x9, 0x9}) dup2(r0, r2) 13:31:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000040)="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", 0x108) 13:31:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff8001}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 13:31:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 13:31:06 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x1001f}], 0x3, 0x0, 0x30, 0x0) 13:31:06 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x302b, 0x6) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:31:06 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)) [ 923.687380][ T7869] ref_ctr_offset mismatch. inode: 0x361e offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 923.736737][ T7876] ref_ctr_offset mismatch. inode: 0x361e offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 13:31:07 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8029, 0x0) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[], 0x21a) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000400)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:31:07 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x26, 0x1, 0x0) fork() 13:31:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xe3348cf9415ac3) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) fcntl$notify(r0, 0x402, 0x80000010) 13:31:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f000000b1c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c617", 0x2}], 0x1}}, {{&(0x7f0000000280)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) 13:31:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, &(0x7f0000000480)={{{@in=@local}}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe8) 13:31:07 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 13:31:07 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001280)) [ 924.488302][ T22] kauditd_printk_skb: 9 callbacks suppressed [ 924.488313][ T22] audit: type=1326 audit(1632231067.173:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 13:31:07 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13:31:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x852e, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) [ 924.519520][ T22] audit: type=1326 audit(1632231067.203:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.545195][ T7895] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 13:31:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x1263, 0x0) 13:31:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f000000b1c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c617", 0x2}], 0x1}}, {{&(0x7f0000000280)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) 13:31:07 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e98c2d0e61c45d599cb440a43848623cabe109323f1705b6273670001000000000000", 0x23}], 0x1, 0x7, 0xffffffff) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast2, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18091, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) [ 924.573415][ T22] audit: type=1326 audit(1632231067.203:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.610010][ T22] audit: type=1326 audit(1632231067.223:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.635427][ T22] audit: type=1326 audit(1632231067.243:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.655238][ C1] sd 0:0:1:0: tag#272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 924.660876][ T22] audit: type=1326 audit(1632231067.243:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.669792][ C1] sd 0:0:1:0: tag#272 CDB: opcode=0xe5 (vendor) [ 924.669808][ C1] sd 0:0:1:0: tag#272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 924.669824][ C1] sd 0:0:1:0: tag#272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 924.669837][ C1] sd 0:0:1:0: tag#272 CDB[20]: ba [ 924.723660][ T22] audit: type=1326 audit(1632231067.243:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.748402][ T22] audit: type=1326 audit(1632231067.243:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.749493][ C1] sd 0:0:1:0: tag#275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 924.773416][ T22] audit: type=1326 audit(1632231067.243:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.782801][ C1] sd 0:0:1:0: tag#275 CDB: opcode=0xe5 (vendor) [ 924.782819][ C1] sd 0:0:1:0: tag#275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 924.807639][ T22] audit: type=1326 audit(1632231067.243:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=7884 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 924.813524][ C1] sd 0:0:1:0: tag#275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 924.855809][ C1] sd 0:0:1:0: tag#275 CDB[20]: ba 13:31:08 executing program 5: clone3(&(0x7f0000003840)={0x11800480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003800)=[0x0], 0x1}, 0x58) 13:31:08 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xfffffe43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0000800fbc054eaed8d736"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f000000b1c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c617", 0x2}], 0x1}}, {{&(0x7f0000000280)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) 13:31:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000011700)) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200a0, 0x0) 13:31:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "0d1eda0e947c5e30f560dd"}]}}}], 0x20}}], 0x2, 0x0) 13:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c072a0445ca1dce681baf9"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:08 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2e, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000010000027b23663"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:31:08 executing program 2: r0 = semget(0x0, 0x0, 0x0) r1 = semget(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000f80)=[{0x0, 0x1000}, {}], 0x2) semop(r0, &(0x7f0000000080)=[{0x2, 0x5, 0x1800}, {0x0, 0x7ff}], 0x2) 13:31:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r0) 13:31:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f000000b1c0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c617", 0x2}], 0x1}}, {{&(0x7f0000000280)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) 13:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c072a0445ca1dce681baf9"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:08 executing program 4: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001600)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 13:31:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "382d39f9b8fc4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059700)={0x4000000, [], 0x69, "d2a075954ddb0b"}) syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {}, {}, {r4, r6}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c580)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x40, "067bde4110e697"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfc, "e753090c282200"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a640)={0x0, [], 0x9, "d5b67d2b023a8b"}) pread64(r0, 0x0, 0x6c, 0x100010) 13:31:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000, @empty}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1260}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000002e40), 0x2, 0x0) 13:31:08 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2e, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000010000027b23663"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c072a0445ca1dce681baf9"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:08 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c072a0445ca1dce681baf9"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:08 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x60a442, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0}) pselect6(0x40, &(0x7f00000001c0)={0x5}, 0x0, &(0x7f0000000240)={0x9}, &(0x7f0000000300)={r0}, 0x0) 13:31:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x3df}], 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b4a2f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) [ 925.498034][ C1] sd 0:0:1:0: tag#279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 925.507809][ C1] sd 0:0:1:0: tag#279 CDB: opcode=0xe5 (vendor) [ 925.514072][ C1] sd 0:0:1:0: tag#279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 925.523005][ C1] sd 0:0:1:0: tag#279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 925.531957][ C1] sd 0:0:1:0: tag#279 CDB[20]: ba 13:31:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000, @empty}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1260}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000002e40), 0x2, 0x0) 13:31:08 executing program 5: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:31:08 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf0, &(0x7f0000001680)="8d31e183156939000000e28c0b1dd2a357b2e1ff745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab9a915308c4829b4b43353c485f8bb2965cc5e1292aaa6375f12e594ac96800000000823ec2117496b2dd4837334f73c37edfd46003eb96a9c79d3de0cab4645adde76e8ac90dba5bdc53cdc3235210b2e21df4f23e22471e2d53415f8f4151d0b915d0c68708733778513261f1e9a548b33b5e8a96381e1d1ff7adcc95ed1cdd1e42fa8f94fc07e0ba6d35a1c89c4b200f63c0b8a455a19c00994f30c13cd0c08ac368d2d3e0423f0959abbe34ea129b4beb50"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x34) 13:31:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000, @empty}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1260}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000002e40), 0x2, 0x0) 13:31:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "382d39f9b8fc4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059700)={0x4000000, [], 0x69, "d2a075954ddb0b"}) syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {}, {}, {r4, r6}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c580)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x40, "067bde4110e697"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfc, "e753090c282200"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a640)={0x0, [], 0x9, "d5b67d2b023a8b"}) pread64(r0, 0x0, 0x6c, 0x100010) 13:31:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000600)="0d3a3b2be60cd8406d5acf3eb82c8906d119268c124138fab1fa6a9e8482242ea748239898239c64141299a1ae04fda17d326092db213d6fecd727cabd543359107231f379b702f100b8dc0fbd050523119649bd7c8c008fe8db41eb75bc10d719b22ae102364127d06fcb52d21c09d7669b38e16bf481d0b6f58992fa8429032d0b8265a097473ea33b71d7fe3c38e01e2b4cde96a448fcccb8c60c16e20986fef26217a17c2eecc961b1c28c2aafa8c0757485a27e9150bb4ccc0168a8d14a26aef7cc6c82a3ee751d35b1254ff94af9243d4bbdd392f8e3bb61377dad9c161934b00d6b98ec5a16b499fc7a35d26fcc63a10ec1eea2e8e4768fa39fa18fc5b345a2f487fb48297dd6c6ff2a69c68c6eedcd56cf0a09887010010f1e043e2511e8078fe8ab1a7386df4370322849da56de4fefc96f761367d3bdf78b3c108301fcca70e0fa4f83cd88e4dcac4f76072243a615dd7309f5066feefa740559608145a30091759c147a931107d97f4213c4a79fc81b7e4fcadf5a341f96a4e0161bb4f7b181e5b2217320c5209f2fa81d47070a36b14985ab02fadbddcc917b540e8947a74736787476dcd100ea3db58adcc3f804b7e52ff19f22243a4dad2545595f26b036977cc7fa2d37436c405cd21a5926953383cf9c8a852b0b0f6761735b679688a157d65d0132491b62efede873fa5e82a8b6b6ef3242ebe7a304b545340ff02a0fbabd5b7329203c1ab9e068290a0b44496eb9d5552b81d5092803fe5f5b927f60522dcbd0de5b65015304271bc5091038bd55048760716ca81a081e0bce3d626508dbd973fdd0dc950dfff5abf188f48448c0c4f0c62f0e8cfa1b83415d6e8c21b5b37750d5aea626fe0c2a7aa7d1b641c96f4d0fe4329689fdaeea5ce74038ecb8e263dc78fce32393465e497b46d2d3bf559ff99bea8374d288b88f78fa83edb33b8663de0999e3d2b58dea5847c33447c6614fb7c746bdfa14ce3c07a4fa3bf80d00616a75f75656848ce1914191a4b86832bd83c032c7954389de9cbfc62c7bc272d8fc5d2a484848809ea7462c2cea54a315c73f5ffe6c76ebdbd611ffffd7a37f51e405781252ad75bba89492a9a00a78a7402b88e5eb03071720d678c6ec5c2ff38adda7240373fd239ca65053f34b11873215d9139d6a1d5bcbd275a924186cb9215ceca17a8ad482acdcfe5007f0bf5002a1707e24d3b23a4ee510f0cc713d9bb6c6597752868a710fb43e972a3d248751e5ccab65241e138137b9615c3df62d535564bed2d804c8acd709a762cb4937997087203417475b13ec27cd22432227de7897d2eadaaafc368ed8f7f7a941f651d87e9f3d3236d28e58d839d15c40f461bea1c5000ed876dccfc0798bc2ec5b968a0b9b376d", 0x3df}], 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b4a2f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) 13:31:08 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) [ 925.716852][ C1] sd 0:0:1:0: tag#280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 925.726633][ C1] sd 0:0:1:0: tag#280 CDB: opcode=0xe5 (vendor) [ 925.732892][ C1] sd 0:0:1:0: tag#280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 925.741930][ C1] sd 0:0:1:0: tag#280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 925.750872][ C1] sd 0:0:1:0: tag#280 CDB[20]: ba 13:31:11 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2e, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000010000027b23663"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:31:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000, @empty}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1260}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000002e40), 0x2, 0x0) 13:31:11 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374bd8588a8db38f841958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9b152d05dac39208ab672", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:11 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:11 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x3df}], 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b4a2f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) 13:31:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "382d39f9b8fc4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059700)={0x4000000, [], 0x69, "d2a075954ddb0b"}) syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {}, {}, {r4, r6}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c580)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x40, "067bde4110e697"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfc, "e753090c282200"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a640)={0x0, [], 0x9, "d5b67d2b023a8b"}) pread64(r0, 0x0, 0x6c, 0x100010) 13:31:11 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x50, &(0x7f0000000200)="c4ca9107787b049ef7a22899f37ba7baaadb20df2275d8c7d89e896abedc792bfbd41b0658be8de570563117df5cb67142572be0875d0403c85be3ba6ea87b9071d13caf06b156b50f3ad66926574022"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:31:11 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) [ 928.540459][ C0] sd 0:0:1:0: tag#281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 928.540485][ C0] sd 0:0:1:0: tag#281 CDB: opcode=0xe5 (vendor) [ 928.540500][ C0] sd 0:0:1:0: tag#281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 928.540515][ C0] sd 0:0:1:0: tag#281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:31:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 13:31:11 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x143, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) [ 928.540529][ C0] sd 0:0:1:0: tag#281 CDB[20]: ba 13:31:11 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}]}) 13:31:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "382d39f9b8fc4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059700)={0x4000000, [], 0x69, "d2a075954ddb0b"}) syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {r4}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {r4}, {}, {}, {r4, r6}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c580)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x40, "067bde4110e697"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0xfc, "e753090c282200"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a640)={0x0, [], 0x9, "d5b67d2b023a8b"}) pread64(r0, 0x0, 0x6c, 0x100010) [ 928.691793][ C1] sd 0:0:1:0: tag#282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 928.701572][ C1] sd 0:0:1:0: tag#282 CDB: opcode=0xe5 (vendor) [ 928.707824][ C1] sd 0:0:1:0: tag#282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 928.716763][ C1] sd 0:0:1:0: tag#282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 928.725684][ C1] sd 0:0:1:0: tag#282 CDB[20]: ba 13:31:14 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x2e, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000010000027b23663"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 13:31:14 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x3df}], 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b4a2f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) 13:31:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}]}) 13:31:14 executing program 5: add_key(&(0x7f00000017c0)='asymmetric\x00', 0x0, &(0x7f0000002ac0)="ff68", 0x2, 0xfffffffffffffffe) 13:31:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x68a}, {0x44}, {0x6}]}) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:31:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}]}) 13:31:14 executing program 4: r0 = perf_event_open(&(0x7f0000001000)={0x8, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) 13:31:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x102, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="7b2d0797b0762984f67e35"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x204) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 931.543839][ T22] kauditd_printk_skb: 164 callbacks suppressed [ 931.543851][ T22] audit: type=1326 audit(1632231074.233:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49088cb739 code=0x0 13:31:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r1}}]}) 13:31:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) poll(&(0x7f0000000040)=[{r1, 0x851d}], 0x1, 0x403) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40002015}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x9}) 13:31:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='D', 0x1}], 0x1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0) ftruncate(r2, 0x10099b8) sendfile(r1, r2, 0x0, 0x800000000043) [ 932.365026][ T22] audit: type=1326 audit(1632231075.053:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49088cb739 code=0x0 13:31:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019400)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0xa) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8f, &(0x7f00000003c0)="59584d830c91645428e7e0d62712cf8cac4fc40c92926a8151e45b8a99ab81842000a56a62b9d058c4ad8a28eb30dfb808e468a67c151995be021086369240c141ef158d356a1c2e3292de14019581b9d50215a9c84b4ce117fc0df8bc9b2bb51b152ba50da053be3e04dfb3c14eb9cb15bea6512c128a104a5c657272f02986a66f6bc72d7b352c8c99e1bb6c192d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:17 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000540)='system_u:object_r:modules_dep_t:s0\x00', 0x23) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 13:31:17 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 13:31:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:17 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 13:31:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f606557d608138a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) read(r0, &(0x7f00000001c0)=""/94, 0x5e) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xfe8d) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 13:31:17 executing program 4: r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0}, 0xa99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0xff12) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000007c000180080003000000000014000200776c616e300000000000000000000000140002007465616d5f736c6176655f310000000014000200766972745f77696669300000000000001400020069703665727370616e30000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030000000000440001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007866726d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="020001801c0001800800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="01000000010000006b7036746e"], 0x10c}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 13:31:17 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 934.553342][ T22] audit: type=1400 audit(1632231077.243:2870): avc: denied { create } for pid=8096 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=key permissive=1 [ 934.584739][ T22] audit: type=1400 audit(1632231077.243:2871): avc: denied { write } for pid=8096 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=key permissive=1 [ 934.726878][ C0] sd 0:0:1:0: tag#283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 934.736682][ C0] sd 0:0:1:0: tag#283 CDB: opcode=0xe5 (vendor) [ 934.742936][ C0] sd 0:0:1:0: tag#283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 934.751875][ C0] sd 0:0:1:0: tag#283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 934.760810][ C0] sd 0:0:1:0: tag#283 CDB[20]: ba 13:31:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019400)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0xa) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8f, &(0x7f00000003c0)="59584d830c91645428e7e0d62712cf8cac4fc40c92926a8151e45b8a99ab81842000a56a62b9d058c4ad8a28eb30dfb808e468a67c151995be021086369240c141ef158d356a1c2e3292de14019581b9d50215a9c84b4ce117fc0df8bc9b2bb51b152ba50da053be3e04dfb3c14eb9cb15bea6512c128a104a5c657272f02986a66f6bc72d7b352c8c99e1bb6c192d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/protocols\x00') readv(r0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000240)=""/182, 0xb6}], 0x3) 13:31:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, 0x0, @private0}, 0x1c, 0x0}, 0x1c) 13:31:17 executing program 4: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:31:17 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) finit_module(r0, 0x0, 0x0) 13:31:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) r2 = dup2(r0, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x9, 0x0, 0x3f, 0x8, 0x0, 0x8]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r3 = accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000005d00)={r5, 0x7a, 0x1, [0xffffffffffffff81, 0x0, 0x6, 0x2, 0x5], [0xfffffffffffffffd, 0x401, 0x6, 0xffffffffffffffc1, 0xfffffffffffff0c4, 0x5d3, 0x2, 0x7f, 0x6fb, 0x7fffffff, 0x9, 0x3, 0x3ff, 0xffffffffffffffc1, 0x33c, 0x0, 0x40, 0x8, 0x16, 0x5, 0xa0d, 0x80000001, 0x45, 0x2af8, 0x5, 0x9, 0x0, 0x825, 0x99b9, 0x1f, 0x5, 0x800, 0x7, 0x6619, 0xd84, 0x6, 0x0, 0xd950, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x7b6, 0x7ff, 0x8, 0x8000, 0x8, 0x3f, 0x6, 0x200, 0x2, 0xe5d5, 0x1, 0x415, 0x7, 0x8000, 0x400, 0x6, 0x20, 0x200, 0x96d4, 0x7, 0x1ff, 0x3, 0x6c0, 0x101, 0x65, 0x4, 0x3, 0x9, 0x0, 0xb53d, 0xdf, 0x7, 0x20, 0x8, 0x2, 0xfffffffffffffbff, 0x4b1f, 0xd3c, 0x3, 0x9, 0x2, 0xfffffffffffff9dd, 0x0, 0x0, 0x3, 0x3, 0x5, 0x9, 0x40c79785, 0x0, 0x8e6a, 0x3, 0x7ff, 0x1e7, 0x9, 0x0, 0x100000001, 0x3, 0x10000, 0x3, 0x1, 0x3, 0xba, 0x4, 0x100000001, 0x1f, 0x0, 0x200000000000000, 0x21, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x5, 0x4, 0x7]}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/248, 0xf8}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/224, 0xe0}, {&(0x7f0000001d80)=""/102, 0x66}, {&(0x7f0000001e00)=""/68, 0x44}], 0x6, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000001f80)=""/213, 0xd5}, {&(0x7f0000002080)=""/22, 0x16}, {&(0x7f00000020c0)=""/246, 0xf6}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/175, 0xaf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/238, 0xee}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/218, 0xda}, {&(0x7f0000005640)=""/214, 0xd6}, {&(0x7f0000005740)=""/201, 0xc9}, {&(0x7f0000005840)=""/176, 0xb0}, {&(0x7f0000005900)=""/140, 0x8c}, {&(0x7f00000059c0)=""/166, 0xa6}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x5, 0x12100, &(0x7f0000005cc0)={0x77359400}) writev(r6, &(0x7f0000001300), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:31:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) r2 = dup2(r0, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x9, 0x0, 0x3f, 0x8, 0x0, 0x8]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r3 = accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000005d00)={r5, 0x7a, 0x1, [0xffffffffffffff81, 0x0, 0x6, 0x2, 0x5], [0xfffffffffffffffd, 0x401, 0x6, 0xffffffffffffffc1, 0xfffffffffffff0c4, 0x5d3, 0x2, 0x7f, 0x6fb, 0x7fffffff, 0x9, 0x3, 0x3ff, 0xffffffffffffffc1, 0x33c, 0x0, 0x40, 0x8, 0x16, 0x5, 0xa0d, 0x80000001, 0x45, 0x2af8, 0x5, 0x9, 0x0, 0x825, 0x99b9, 0x1f, 0x5, 0x800, 0x7, 0x6619, 0xd84, 0x6, 0x0, 0xd950, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x7b6, 0x7ff, 0x8, 0x8000, 0x8, 0x3f, 0x6, 0x200, 0x2, 0xe5d5, 0x1, 0x415, 0x7, 0x8000, 0x400, 0x6, 0x20, 0x200, 0x96d4, 0x7, 0x1ff, 0x3, 0x6c0, 0x101, 0x65, 0x4, 0x3, 0x9, 0x0, 0xb53d, 0xdf, 0x7, 0x20, 0x8, 0x2, 0xfffffffffffffbff, 0x4b1f, 0xd3c, 0x3, 0x9, 0x2, 0xfffffffffffff9dd, 0x0, 0x0, 0x3, 0x3, 0x5, 0x9, 0x40c79785, 0x0, 0x8e6a, 0x3, 0x7ff, 0x1e7, 0x9, 0x0, 0x100000001, 0x3, 0x10000, 0x3, 0x1, 0x3, 0xba, 0x4, 0x100000001, 0x1f, 0x0, 0x200000000000000, 0x21, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x5, 0x4, 0x7]}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/248, 0xf8}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/224, 0xe0}, {&(0x7f0000001d80)=""/102, 0x66}, {&(0x7f0000001e00)=""/68, 0x44}], 0x6, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000001f80)=""/213, 0xd5}, {&(0x7f0000002080)=""/22, 0x16}, {&(0x7f00000020c0)=""/246, 0xf6}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/175, 0xaf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/238, 0xee}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/218, 0xda}, {&(0x7f0000005640)=""/214, 0xd6}, {&(0x7f0000005740)=""/201, 0xc9}, {&(0x7f0000005840)=""/176, 0xb0}, {&(0x7f0000005900)=""/140, 0x8c}, {&(0x7f00000059c0)=""/166, 0xa6}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x5, 0x12100, &(0x7f0000005cc0)={0x77359400}) writev(r6, &(0x7f0000001300), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:31:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:18 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) [ 935.435558][ C0] sd 0:0:1:0: tag#284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 935.445586][ C0] sd 0:0:1:0: tag#284 CDB: opcode=0xe5 (vendor) [ 935.451843][ C0] sd 0:0:1:0: tag#284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 935.460790][ C0] sd 0:0:1:0: tag#284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 935.469719][ C0] sd 0:0:1:0: tag#284 CDB[20]: ba 13:31:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f606557d608138a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) read(r0, &(0x7f00000001c0)=""/94, 0x5e) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xfe8d) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 13:31:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) r2 = dup2(r0, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x9, 0x0, 0x3f, 0x8, 0x0, 0x8]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r3 = accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000005d00)={r5, 0x7a, 0x1, [0xffffffffffffff81, 0x0, 0x6, 0x2, 0x5], [0xfffffffffffffffd, 0x401, 0x6, 0xffffffffffffffc1, 0xfffffffffffff0c4, 0x5d3, 0x2, 0x7f, 0x6fb, 0x7fffffff, 0x9, 0x3, 0x3ff, 0xffffffffffffffc1, 0x33c, 0x0, 0x40, 0x8, 0x16, 0x5, 0xa0d, 0x80000001, 0x45, 0x2af8, 0x5, 0x9, 0x0, 0x825, 0x99b9, 0x1f, 0x5, 0x800, 0x7, 0x6619, 0xd84, 0x6, 0x0, 0xd950, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x7b6, 0x7ff, 0x8, 0x8000, 0x8, 0x3f, 0x6, 0x200, 0x2, 0xe5d5, 0x1, 0x415, 0x7, 0x8000, 0x400, 0x6, 0x20, 0x200, 0x96d4, 0x7, 0x1ff, 0x3, 0x6c0, 0x101, 0x65, 0x4, 0x3, 0x9, 0x0, 0xb53d, 0xdf, 0x7, 0x20, 0x8, 0x2, 0xfffffffffffffbff, 0x4b1f, 0xd3c, 0x3, 0x9, 0x2, 0xfffffffffffff9dd, 0x0, 0x0, 0x3, 0x3, 0x5, 0x9, 0x40c79785, 0x0, 0x8e6a, 0x3, 0x7ff, 0x1e7, 0x9, 0x0, 0x100000001, 0x3, 0x10000, 0x3, 0x1, 0x3, 0xba, 0x4, 0x100000001, 0x1f, 0x0, 0x200000000000000, 0x21, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x5, 0x4, 0x7]}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/248, 0xf8}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/224, 0xe0}, {&(0x7f0000001d80)=""/102, 0x66}, {&(0x7f0000001e00)=""/68, 0x44}], 0x6, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000001f80)=""/213, 0xd5}, {&(0x7f0000002080)=""/22, 0x16}, {&(0x7f00000020c0)=""/246, 0xf6}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/175, 0xaf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/238, 0xee}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/218, 0xda}, {&(0x7f0000005640)=""/214, 0xd6}, {&(0x7f0000005740)=""/201, 0xc9}, {&(0x7f0000005840)=""/176, 0xb0}, {&(0x7f0000005900)=""/140, 0x8c}, {&(0x7f00000059c0)=""/166, 0xa6}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x5, 0x12100, &(0x7f0000005cc0)={0x77359400}) writev(r6, &(0x7f0000001300), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:31:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 935.542111][ C0] sd 0:0:1:0: tag#285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 935.551900][ C0] sd 0:0:1:0: tag#285 CDB: opcode=0xe5 (vendor) [ 935.558145][ C0] sd 0:0:1:0: tag#285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 935.567138][ C0] sd 0:0:1:0: tag#285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 935.576088][ C0] sd 0:0:1:0: tag#285 CDB[20]: ba 13:31:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019400)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0xa) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8f, &(0x7f00000003c0)="59584d830c91645428e7e0d62712cf8cac4fc40c92926a8151e45b8a99ab81842000a56a62b9d058c4ad8a28eb30dfb808e468a67c151995be021086369240c141ef158d356a1c2e3292de14019581b9d50215a9c84b4ce117fc0df8bc9b2bb51b152ba50da053be3e04dfb3c14eb9cb15bea6512c128a104a5c657272f02986a66f6bc72d7b352c8c99e1bb6c192d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:20 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:20 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 13:31:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f606557d608138a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) read(r0, &(0x7f00000001c0)=""/94, 0x5e) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xfe8d) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 13:31:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) r2 = dup2(r0, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x9, 0x0, 0x3f, 0x8, 0x0, 0x8]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) r3 = accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000005d00)={r5, 0x7a, 0x1, [0xffffffffffffff81, 0x0, 0x6, 0x2, 0x5], [0xfffffffffffffffd, 0x401, 0x6, 0xffffffffffffffc1, 0xfffffffffffff0c4, 0x5d3, 0x2, 0x7f, 0x6fb, 0x7fffffff, 0x9, 0x3, 0x3ff, 0xffffffffffffffc1, 0x33c, 0x0, 0x40, 0x8, 0x16, 0x5, 0xa0d, 0x80000001, 0x45, 0x2af8, 0x5, 0x9, 0x0, 0x825, 0x99b9, 0x1f, 0x5, 0x800, 0x7, 0x6619, 0xd84, 0x6, 0x0, 0xd950, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x7b6, 0x7ff, 0x8, 0x8000, 0x8, 0x3f, 0x6, 0x200, 0x2, 0xe5d5, 0x1, 0x415, 0x7, 0x8000, 0x400, 0x6, 0x20, 0x200, 0x96d4, 0x7, 0x1ff, 0x3, 0x6c0, 0x101, 0x65, 0x4, 0x3, 0x9, 0x0, 0xb53d, 0xdf, 0x7, 0x20, 0x8, 0x2, 0xfffffffffffffbff, 0x4b1f, 0xd3c, 0x3, 0x9, 0x2, 0xfffffffffffff9dd, 0x0, 0x0, 0x3, 0x3, 0x5, 0x9, 0x40c79785, 0x0, 0x8e6a, 0x3, 0x7ff, 0x1e7, 0x9, 0x0, 0x100000001, 0x3, 0x10000, 0x3, 0x1, 0x3, 0xba, 0x4, 0x100000001, 0x1f, 0x0, 0x200000000000000, 0x21, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x5, 0x4, 0x7]}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/248, 0xf8}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/86, 0x56}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/224, 0xe0}, {&(0x7f0000001d80)=""/102, 0x66}, {&(0x7f0000001e00)=""/68, 0x44}], 0x6, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000001f80)=""/213, 0xd5}, {&(0x7f0000002080)=""/22, 0x16}, {&(0x7f00000020c0)=""/246, 0xf6}, {&(0x7f00000021c0)=""/16, 0x10}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/175, 0xaf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/238, 0xee}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/218, 0xda}, {&(0x7f0000005640)=""/214, 0xd6}, {&(0x7f0000005740)=""/201, 0xc9}, {&(0x7f0000005840)=""/176, 0xb0}, {&(0x7f0000005900)=""/140, 0x8c}, {&(0x7f00000059c0)=""/166, 0xa6}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x5, 0x12100, &(0x7f0000005cc0)={0x77359400}) writev(r6, &(0x7f0000001300), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 937.726903][ C0] sd 0:0:1:0: tag#286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 937.736667][ C0] sd 0:0:1:0: tag#286 CDB: opcode=0xe5 (vendor) [ 937.742930][ C0] sd 0:0:1:0: tag#286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 937.751887][ C0] sd 0:0:1:0: tag#286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 937.760846][ C0] sd 0:0:1:0: tag#286 CDB[20]: ba 13:31:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 938.069843][ C0] sd 0:0:1:0: tag#287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 938.079582][ C0] sd 0:0:1:0: tag#287 CDB: opcode=0xe5 (vendor) [ 938.085863][ C0] sd 0:0:1:0: tag#287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 938.094815][ C0] sd 0:0:1:0: tag#287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 938.103881][ C0] sd 0:0:1:0: tag#287 CDB[20]: ba 13:31:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:21 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 13:31:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f606557d608138a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) read(r0, &(0x7f00000001c0)=""/94, 0x5e) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xfe8d) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 13:31:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 938.618234][ C1] sd 0:0:1:0: tag#288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 938.628042][ C1] sd 0:0:1:0: tag#288 CDB: opcode=0xe5 (vendor) [ 938.634294][ C1] sd 0:0:1:0: tag#288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 938.643245][ C1] sd 0:0:1:0: tag#288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 938.652201][ C1] sd 0:0:1:0: tag#288 CDB[20]: ba 13:31:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 938.945675][ C0] sd 0:0:1:0: tag#289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 938.955436][ C0] sd 0:0:1:0: tag#289 CDB: opcode=0xe5 (vendor) [ 938.961772][ C0] sd 0:0:1:0: tag#289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 938.970726][ C0] sd 0:0:1:0: tag#289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 938.979770][ C0] sd 0:0:1:0: tag#289 CDB[20]: ba 13:31:22 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 939.473278][ C0] sd 0:0:1:0: tag#290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 939.483072][ C0] sd 0:0:1:0: tag#290 CDB: opcode=0xe5 (vendor) [ 939.489315][ C0] sd 0:0:1:0: tag#290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 939.498331][ C0] sd 0:0:1:0: tag#290 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 939.507286][ C0] sd 0:0:1:0: tag#290 CDB[20]: ba 13:31:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019400)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0xa) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8f, &(0x7f00000003c0)="59584d830c91645428e7e0d62712cf8cac4fc40c92926a8151e45b8a99ab81842000a56a62b9d058c4ad8a28eb30dfb808e468a67c151995be021086369240c141ef158d356a1c2e3292de14019581b9d50215a9c84b4ce117fc0df8bc9b2bb51b152ba50da053be3e04dfb3c14eb9cb15bea6512c128a104a5c657272f02986a66f6bc72d7b352c8c99e1bb6c192d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:23 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 940.758904][ C0] sd 0:0:1:0: tag#291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.768674][ C0] sd 0:0:1:0: tag#291 CDB: opcode=0xe5 (vendor) [ 940.774954][ C0] sd 0:0:1:0: tag#291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 940.782193][ C1] sd 0:0:1:0: tag#292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.783922][ C0] sd 0:0:1:0: tag#291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 940.793637][ C1] sd 0:0:1:0: tag#292 CDB: opcode=0xe5 (vendor) [ 940.802559][ C0] sd 0:0:1:0: tag#291 CDB[20]: ba [ 940.808782][ C1] sd 0:0:1:0: tag#292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 940.808799][ C1] sd 0:0:1:0: tag#292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 940.824576][ C0] sd 0:0:1:0: tag#293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.831768][ C1] sd 0:0:1:0: tag#292 CDB[20]: ba [ 940.841471][ C0] sd 0:0:1:0: tag#293 CDB: opcode=0xe5 (vendor) [ 940.852697][ C0] sd 0:0:1:0: tag#293 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 940.855393][ C1] sd 0:0:1:0: tag#294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.861665][ C0] sd 0:0:1:0: tag#293 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 940.871383][ C1] sd 0:0:1:0: tag#294 CDB: opcode=0xe5 (vendor) [ 940.880296][ C0] sd 0:0:1:0: tag#293 CDB[20]: ba [ 940.886511][ C1] sd 0:0:1:0: tag#294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 940.900430][ C1] sd 0:0:1:0: tag#294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 940.909368][ C1] sd 0:0:1:0: tag#294 CDB[20]: ba [ 940.917982][ C1] sd 0:0:1:0: tag#295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.927734][ C1] sd 0:0:1:0: tag#295 CDB: opcode=0xe5 (vendor) [ 940.933982][ C1] sd 0:0:1:0: tag#295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 940.942943][ C1] sd 0:0:1:0: tag#295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 940.951892][ C1] sd 0:0:1:0: tag#295 CDB[20]: ba 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 940.981221][ C1] sd 0:0:1:0: tag#296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 940.991139][ C1] sd 0:0:1:0: tag#296 CDB: opcode=0xe5 (vendor) [ 940.997362][ C1] sd 0:0:1:0: tag#296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 941.006492][ C1] sd 0:0:1:0: tag#296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 941.015436][ C1] sd 0:0:1:0: tag#296 CDB[20]: ba 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 941.052703][ C0] sd 0:0:1:0: tag#297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.062466][ C0] sd 0:0:1:0: tag#297 CDB: opcode=0xe5 (vendor) [ 941.068704][ C0] sd 0:0:1:0: tag#297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 941.077639][ C0] sd 0:0:1:0: tag#297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 941.086590][ C0] sd 0:0:1:0: tag#297 CDB[20]: ba 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 941.119653][ C1] sd 0:0:1:0: tag#298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.129588][ C1] sd 0:0:1:0: tag#298 CDB: opcode=0xe5 (vendor) [ 941.135839][ C1] sd 0:0:1:0: tag#298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 941.144784][ C1] sd 0:0:1:0: tag#298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 941.153756][ C1] sd 0:0:1:0: tag#298 CDB[20]: ba 13:31:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 941.184539][ C0] sd 0:0:1:0: tag#299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.194287][ C0] sd 0:0:1:0: tag#299 CDB: opcode=0xe5 (vendor) [ 941.200536][ C0] sd 0:0:1:0: tag#299 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 941.209457][ C0] sd 0:0:1:0: tag#299 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 941.218417][ C0] sd 0:0:1:0: tag#299 CDB[20]: ba 13:31:24 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 941.244798][ C0] sd 0:0:1:0: tag#300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 941.254602][ C0] sd 0:0:1:0: tag#300 CDB: opcode=0xe5 (vendor) [ 941.260843][ C0] sd 0:0:1:0: tag#300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 941.269764][ C0] sd 0:0:1:0: tag#300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 941.278710][ C0] sd 0:0:1:0: tag#300 CDB[20]: ba 13:31:26 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0x101, 0x0) 13:31:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup2(r1, r0) 13:31:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)={{0xe, 0x9b, 0x8, 0x7, 0x31, 0x32, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:31:26 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x40086602, 0x0) 13:31:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 13:31:26 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x10b80a4, &(0x7f0000000240)={[{@test_dummy_encryption}]}) [ 944.147166][ T8288] EXT4-fs (sda1): Test dummy encryption mount option ignored [ 944.155933][ T8288] EXT4-fs (sda1): re-mounted. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 944.167919][ T8290] EXT4-fs (sda1): Test dummy encryption mount option ignored [ 944.176405][ T8290] EXT4-fs (sda1): re-mounted. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. 13:31:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x88, 0x42, 0x0, 0x0) 13:31:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:27 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x80}) 13:31:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') write$binfmt_misc(r0, 0x0, 0x0) fchdir(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48000000000000000000000000000000b2b6a77f06ddcb33a8fac63016b69944fbc6b20700a92384d4c6aeb00ae99a70317fb463bed350139e79abe8fa8aac7ffc7f613357ff620024396eb1b499b56a3654b59ee454fd0260c24e6641a47d4f0637afd780d1ffbcd0c5b0077af9baf7fa53f798e0569c7efc2fa792725a96c8f3"], 0x48}}], 0x2, 0x0) 13:31:27 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x97, 0x0, 0x7, 0x0, 0x0, 0x28300, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x418, 0x0, @perf_config_ext={0x0, 0x100}, 0x800, 0x7, 0x0, 0x8, 0x66, 0xed7, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x3b, 0x5, 0x8, 0x0, 0xcc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xcb8, 0x80}, 0x480, 0xffffffffffffffe0, 0x0, 0x0, 0x20, 0x0, 0x173, 0x0, 0x4bf, 0x0, 0xe408}, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055300)={0x8f7, [], 0x0, "0d4abfd4b32220"}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 13:31:27 executing program 3: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)='@', 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 13:31:27 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x810, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 13:31:27 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1210c2, 0x0) 13:31:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x11, 0x0, 0x0) 13:31:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x5}, {0x35, 0x0, 0x0, 0x1000}, {0x16}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:31:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ff8f8763f4685da4bd8dfe"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 944.747062][ T22] audit: type=1326 audit(1632231087.433:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8323 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811007a739 code=0x0 13:31:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ff8f8763f4685da4bd8dfe"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:28 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x30) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1}, 0x1c) 13:31:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 13:31:28 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x10, &(0x7f0000000180), 0x90) 13:31:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x1000000080000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) 13:31:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 13:31:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) unshare(0x8000400) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x10001) 13:31:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ff8f8763f4685da4bd8dfe"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 945.589549][ T22] audit: type=1326 audit(1632231088.273:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8323 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811007a739 code=0x0 [ 945.601379][ T8352] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:31:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) 13:31:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 945.643299][ T8356] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:31:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x58, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 13:31:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ff8f8763f4685da4bd8dfe"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:28 executing program 1: r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)="a5", 0x1) 13:31:29 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x3, 0x0) r1 = epoll_create(0x6) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0xc000001d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x3603}) 13:31:29 executing program 4: rmdir(&(0x7f0000000480)='\x00') 13:31:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x58, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 13:31:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0) 13:31:29 executing program 1: r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)="a5", 0x1) 13:31:29 executing program 1: r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)="a5", 0x1) 13:31:29 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0e4b8c00581e006200a3b8"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) fdatasync(r0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 946.501024][ T22] audit: type=1326 audit(1632231089.193:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.534265][ T22] audit: type=1326 audit(1632231089.213:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.559114][ T22] audit: type=1326 audit(1632231089.213:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.586041][ T22] audit: type=1326 audit(1632231089.213:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.610646][ T22] audit: type=1326 audit(1632231089.213:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.635479][ T22] audit: type=1326 audit(1632231089.213:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 [ 946.660342][ T22] audit: type=1326 audit(1632231089.213:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 13:31:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/234, 0xea}], 0x1, 0xe24, 0x0) 13:31:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x58, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 13:31:29 executing program 1: r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)="a5", 0x1) 13:31:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)={0x38, r1, 0xc0d5d4657c2208bb, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) 13:31:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x58, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 946.685070][ T22] audit: type=1326 audit(1632231089.213:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8397 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdfec9d2739 code=0x7ffc0000 13:31:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 13:31:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000280)={0x0, 0xff}) 13:31:29 executing program 0: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 13:31:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000280)={0x0, 0xff}) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 13:31:30 executing program 0: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000280)={0x0, 0xff}) 13:31:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x9df3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) 13:31:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000280)={0x0, 0xff}) 13:31:30 executing program 2: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000000c0)="7d1b37532869393dbdc414f246feafe73c3ac112", 0x14) 13:31:31 executing program 0: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 13:31:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000004c00)) 13:31:31 executing program 2: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) ptrace(0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x77a5198e4e28dcbf, 0xfc79926e736a305b, 0x0, 0x1, 0x9, 0x10000, 0x1, 0x2, 0x80000001}, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x10000036, 0x1, 0x0, 0x0, 0xfff, 0x5, 0x7, 0x7ff}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) connect$packet(r5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 13:31:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x18, r1, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x4}]}, 0x18}}, 0x0) 13:31:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000004c00)) 13:31:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000004c00)) 13:31:31 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) 13:31:31 executing program 2: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:31 executing program 0: rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="f346d37ff2c4c1185c840561ee00007b7b01fa6f6aa1c463f962d60064660fd054060aa89ef36a67f30f2a6cda00c4c1f91129", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) close_range(r1, 0xffffffffffffffff, 0x0) 13:31:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000004c00)) 13:31:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f841958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x10) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000005b380)={{0x0, 0x2, 0x7fffffff, 0x6, 0x79af8db5, 0x2, 0x1ff, 0x7, 0x0, 0x7fff, 0x400, 0x9, 0x3f, 0x2, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {r9}, {r9, r10}, {}, {}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {r8, r10}, {r9}, {}, {}, {r9, r10}, {0x0, r10}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {r8}, {}, {r9}, {r8}, {}, {r9, r10}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9}, {r8, r10}, {}, {r8}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r9}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {r8}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {r8, r10}, {}, {0x0, r10}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {}, {r8, r10}, {r8}, {r9, r10}, {}, {r8}, {r8, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {}, {}, {r8, r10}, {0x0, r10}, {r9, r10}, {r8}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r9}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r10}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9, r10}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {r8, r10}, {r8, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {r8}, {}, {r8}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {}, {r8}, {}, {r8}, {r9}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {r9}, {r9}, {}, {}, {r9}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {r9}, {r8}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r8, r10}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005b440)={{0x0, 0x1, 0x2, 0x401, 0x3, 0x0, 0x2, 0xffff996d, 0x4, 0x7ff, 0x69, 0x9, 0x80000001, 0x9000, 0x8000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r5, r10}, {r11}], 0x0, "a3ee270ff0fa92"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000300)=""/225, 0xe1}], 0x3, 0x9, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13:31:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x20060600) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x1) [ 949.379199][ C1] scsi_io_completion_action: 8 callbacks suppressed [ 949.379224][ C1] sd 0:0:1:0: tag#288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.395576][ C1] sd 0:0:1:0: tag#288 CDB: opcode=0xe5 (vendor) [ 949.401940][ C1] sd 0:0:1:0: tag#288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.410906][ C1] sd 0:0:1:0: tag#288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.419823][ C1] sd 0:0:1:0: tag#288 CDB[20]: ba 13:31:32 executing program 0: syz_mount_image$tmpfs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000d00)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x37, 0x6b, 0x0]}}]}) 13:31:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x28, r0, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0xc}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x8c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xac, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6894}, @NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="8f7032db45d0", {0x7, 0x7f}}, @ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2011, @random=0x100, {0x1, 0x2, [{0x12}, {0x1, 0x1}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x400, 0x9, 0x40}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x90000a40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsu(0x0, 0x3, 0xc62c2) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000500), 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1) 13:31:32 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x1a0) ftruncate(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000340)="03", 0x1}]) 13:31:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x82, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0x19a30, 0x81, 0x40, 0x2, 0xfbfffffffffffffb, 0xe0a2, 0x9, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001700), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0040, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 13:31:32 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e699f9", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bb0defb9d3cac1"], 0x2c}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0404ff0007fded9d84419ed9d5cb6c182b57d1af34b5e2000000006a0a38da6d0400aa9acae252fbc6a3020000000000000006"], 0xfdef) [ 949.441057][ T8525] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 949.461689][ C1] sd 0:0:1:0: tag#289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.471452][ C1] sd 0:0:1:0: tag#289 CDB: opcode=0xe5 (vendor) [ 949.477710][ C1] sd 0:0:1:0: tag#289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 13:31:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="f0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) [ 949.486704][ C1] sd 0:0:1:0: tag#289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.495677][ C1] sd 0:0:1:0: tag#289 CDB[20]: ba [ 949.511431][ T8536] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:31:32 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x50000) 13:31:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040)=0x101, 0x4) 13:31:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="f0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) 13:31:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x10) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000005b380)={{0x0, 0x2, 0x7fffffff, 0x6, 0x79af8db5, 0x2, 0x1ff, 0x7, 0x0, 0x7fff, 0x400, 0x9, 0x3f, 0x2, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {r9}, {r9, r10}, {}, {}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {r8, r10}, {r9}, {}, {}, {r9, r10}, {0x0, r10}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {r8}, {}, {r9}, {r8}, {}, {r9, r10}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9}, {r8, r10}, {}, {r8}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r9}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {r8}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {r8, r10}, {}, {0x0, r10}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {}, {r8, r10}, {r8}, {r9, r10}, {}, {r8}, {r8, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {}, {}, {r8, r10}, {0x0, r10}, {r9, r10}, {r8}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r9}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r10}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9, r10}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {r8, r10}, {r8, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {r8}, {}, {r8}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {}, {r8}, {}, {r8}, {r9}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {r9}, {r9}, {}, {}, {r9}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {r9}, {r8}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r8, r10}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005b440)={{0x0, 0x1, 0x2, 0x401, 0x3, 0x0, 0x2, 0xffff996d, 0x4, 0x7ff, 0x69, 0x9, 0x80000001, 0x9000, 0x8000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r5, r10}, {r11}], 0x0, "a3ee270ff0fa92"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000300)=""/225, 0xe1}], 0x3, 0x9, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13:31:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x82, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0x19a30, 0x81, 0x40, 0x2, 0xfbfffffffffffffb, 0xe0a2, 0x9, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001700), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0040, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 13:31:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040)=0x101, 0x4) [ 949.534062][ C1] sd 0:0:1:0: tag#291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.543822][ C1] sd 0:0:1:0: tag#291 CDB: opcode=0xe5 (vendor) [ 949.550064][ C1] sd 0:0:1:0: tag#291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.559058][ C1] sd 0:0:1:0: tag#291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.568012][ C1] sd 0:0:1:0: tag#291 CDB[20]: ba 13:31:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="f0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) [ 949.615575][ C1] sd 0:0:1:0: tag#294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.625372][ C1] sd 0:0:1:0: tag#294 CDB: opcode=0xe5 (vendor) [ 949.631646][ C1] sd 0:0:1:0: tag#294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.641750][ C1] sd 0:0:1:0: tag#294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.650689][ C1] sd 0:0:1:0: tag#294 CDB[20]: ba [ 949.668806][ T8559] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 949.677967][ C0] sd 0:0:1:0: tag#297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.687734][ C0] sd 0:0:1:0: tag#297 CDB: opcode=0xe5 (vendor) [ 949.694000][ C0] sd 0:0:1:0: tag#297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.703304][ C0] sd 0:0:1:0: tag#297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.712269][ C0] sd 0:0:1:0: tag#297 CDB[20]: ba 13:31:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x28, r0, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0xc}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x8c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xac, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6894}, @NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="8f7032db45d0", {0x7, 0x7f}}, @ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2011, @random=0x100, {0x1, 0x2, [{0x12}, {0x1, 0x1}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x400, 0x9, 0x40}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x90000a40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsu(0x0, 0x3, 0xc62c2) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000500), 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1) 13:31:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x82, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0x19a30, 0x81, 0x40, 0x2, 0xfbfffffffffffffb, 0xe0a2, 0x9, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001700), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0040, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 13:31:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="f0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) 13:31:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040)=0x101, 0x4) 13:31:32 executing program 5: unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0), 0xc) connect$netlink(r0, &(0x7f0000000000), 0xc) 13:31:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x10) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000005b380)={{0x0, 0x2, 0x7fffffff, 0x6, 0x79af8db5, 0x2, 0x1ff, 0x7, 0x0, 0x7fff, 0x400, 0x9, 0x3f, 0x2, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {r9}, {r9, r10}, {}, {}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {r8, r10}, {r9}, {}, {}, {r9, r10}, {0x0, r10}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {r8}, {}, {r9}, {r8}, {}, {r9, r10}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9}, {r8, r10}, {}, {r8}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r9}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {r8}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {r8, r10}, {}, {0x0, r10}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {}, {r8, r10}, {r8}, {r9, r10}, {}, {r8}, {r8, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {}, {}, {r8, r10}, {0x0, r10}, {r9, r10}, {r8}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r9}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r10}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9, r10}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {r8, r10}, {r8, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {r8}, {}, {r8}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {}, {r8}, {}, {r8}, {r9}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {r9}, {r9}, {}, {}, {r9}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {r9}, {r8}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r8, r10}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005b440)={{0x0, 0x1, 0x2, 0x401, 0x3, 0x0, 0x2, 0xffff996d, 0x4, 0x7ff, 0x69, 0x9, 0x80000001, 0x9000, 0x8000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r5, r10}, {r11}], 0x0, "a3ee270ff0fa92"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000300)=""/225, 0xe1}], 0x3, 0x9, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13:31:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040)=0x101, 0x4) 13:31:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x6, 0x82, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0x19a30, 0x81, 0x40, 0x2, 0xfbfffffffffffffb, 0xe0a2, 0x9, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001700), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0040, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) [ 949.796170][ C0] sd 0:0:1:0: tag#260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.805961][ C0] sd 0:0:1:0: tag#260 CDB: opcode=0xe5 (vendor) [ 949.812220][ C0] sd 0:0:1:0: tag#260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.821175][ C0] sd 0:0:1:0: tag#260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.830160][ C0] sd 0:0:1:0: tag#260 CDB[20]: ba 13:31:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') set_mempolicy(0x2, &(0x7f0000000180)=0x3f, 0xffa) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 949.854487][ C1] sd 0:0:1:0: tag#263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 949.864282][ C1] sd 0:0:1:0: tag#263 CDB: opcode=0xe5 (vendor) [ 949.870557][ C1] sd 0:0:1:0: tag#263 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 949.879492][ C1] sd 0:0:1:0: tag#263 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 949.888454][ C1] sd 0:0:1:0: tag#263 CDB[20]: ba 13:31:32 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setresgid(0xee00, 0x0, 0x0) [ 949.897144][ T8576] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 13:31:32 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x104, &(0x7f0000000400)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 949.931210][ T22] kauditd_printk_skb: 43 callbacks suppressed [ 949.931243][ T22] audit: type=1326 audit(1632231092.623:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49088cb739 code=0x7ffc0000 [ 949.982063][ T22] audit: type=1326 audit(1632231092.623:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f49088cb739 code=0x7ffc0000 [ 950.010292][ T22] audit: type=1326 audit(1632231092.623:2927): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49088cb739 code=0x7ffc0000 [ 950.035958][ T22] audit: type=1326 audit(1632231092.623:2928): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f49088cb739 code=0x7ffc0000 [ 950.061641][ T22] audit: type=1326 audit(1632231092.663:2929): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8590 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49088cb739 code=0x7ffc0000 13:31:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x28, r0, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0xc}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x8c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xac, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6894}, @NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="8f7032db45d0", {0x7, 0x7f}}, @ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2011, @random=0x100, {0x1, 0x2, [{0x12}, {0x1, 0x1}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x400, 0x9, 0x40}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x90000a40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsu(0x0, 0x3, 0xc62c2) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000500), 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1) 13:31:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x10) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000005b380)={{0x0, 0x2, 0x7fffffff, 0x6, 0x79af8db5, 0x2, 0x1ff, 0x7, 0x0, 0x7fff, 0x400, 0x9, 0x3f, 0x2, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {r9}, {r9, r10}, {}, {}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {r8, r10}, {r9}, {}, {}, {r9, r10}, {0x0, r10}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8, r10}, {0x0, r10}, {r8}, {}, {r9}, {r8}, {}, {r9, r10}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9}, {r8, r10}, {}, {r8}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r9}, {}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {r8}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {r8, r10}, {}, {0x0, r10}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {}, {r8, r10}, {r8}, {r9, r10}, {}, {r8}, {r8, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {}, {}, {r8, r10}, {0x0, r10}, {r9, r10}, {r8}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r9}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r10}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9, r10}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {r8, r10}, {r8, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {r8}, {}, {r8}, {r8}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {}, {r8}, {}, {r8}, {r9}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {r9}, {r9}, {}, {}, {r9}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {r9}, {r8}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r8, r10}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005b440)={{0x0, 0x1, 0x2, 0x401, 0x3, 0x0, 0x2, 0xffff996d, 0x4, 0x7ff, 0x69, 0x9, 0x80000001, 0x9000, 0x8000}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b500)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r5, r10}, {r11}], 0x0, "a3ee270ff0fa92"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000300)=""/225, 0xe1}], 0x3, 0x9, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13:31:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 13:31:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 13:31:33 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee6c4252493d2834faafc1f2169271f1ec5721a6535c16009b43a7efe75322cf3af1d7b48e23185ebf24de7024f010eb56a4d9e6c86f8b507139aea1d0a9590f61c9fe3cc9ffb1e33c047bf53b8bf2ecbaac21c4813235354b7c3f948a5cd67acc8eeed21b4499f259f73ff434c441fd21e9c4ddfbd559baefc62efc3ae274f098f10222fc40f339cac4fdad51fee5f4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:33 executing program 5: r0 = syz_io_uring_setup(0x2c13, &(0x7f0000001680)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 13:31:33 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) [ 950.672705][ C1] sd 0:0:1:0: tag#308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 950.682483][ C1] sd 0:0:1:0: tag#308 CDB: opcode=0xe5 (vendor) [ 950.688724][ C1] sd 0:0:1:0: tag#308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 950.697713][ C1] sd 0:0:1:0: tag#308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 950.706678][ C1] sd 0:0:1:0: tag#308 CDB[20]: ba 13:31:33 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x18}}], 0xf}, 0x0) 13:31:33 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4005ef3) fallocate(r0, 0x20, 0x0, 0x106000000) fallocate(r0, 0x8, 0x0, 0x102000000) [ 950.724339][ T8606] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 950.727525][ C1] sd 0:0:1:0: tag#309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 950.742245][ C1] sd 0:0:1:0: tag#309 CDB: opcode=0xe5 (vendor) [ 950.748484][ C1] sd 0:0:1:0: tag#309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 950.757465][ C1] sd 0:0:1:0: tag#309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 950.766434][ C1] sd 0:0:1:0: tag#309 CDB[20]: ba 13:31:33 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x7}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:31:35 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) 13:31:35 executing program 4: r0 = syz_io_uring_setup(0x2369, &(0x7f0000000180), &(0x7f00003af000/0xf000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5b48855eddc96a4f, 0x0, 0x0, 0x0, &(0x7f00003af000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 13:31:35 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x8040}, 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x4004662b, &(0x7f00000004c0)={0x5154}) 13:31:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 13:31:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x28, r0, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0xc}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x8c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xac, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6894}, @NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="8f7032db45d0", {0x7, 0x7f}}, @ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2011, @random=0x100, {0x1, 0x2, [{0x12}, {0x1, 0x1}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x400, 0x9, 0x40}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x90000a40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsu(0x0, 0x3, 0xc62c2) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000500), 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1) 13:31:35 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pkey_free(0xffffffffffffffff) 13:31:35 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x8040}, 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x4004662b, &(0x7f00000004c0)={0x5154}) 13:31:35 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0xffffffe3) unlink(&(0x7f00000000c0)='./bus\x00') r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x4600069c) [ 953.012188][ T22] audit: type=1326 audit(1632231095.703:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8640 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7abe739 code=0x7ffc0000 [ 953.046696][ C0] sd 0:0:1:0: tag#296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:31:35 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x8040}, 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x4004662b, &(0x7f00000004c0)={0x5154}) [ 953.056497][ C0] sd 0:0:1:0: tag#296 CDB: opcode=0xe5 (vendor) [ 953.062779][ C0] sd 0:0:1:0: tag#296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 953.071741][ C0] sd 0:0:1:0: tag#296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 953.080701][ C0] sd 0:0:1:0: tag#296 CDB[20]: ba 13:31:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c757466383d312c666d61736b3d30303030303030303030303030303030303230303030302c00060881e7e6820657f37c74cd28314b620a329e286f154d8d118d1b65929d80040eba03a3e5fc0a3c78020ae211059914518c037876d8fa51ce14fc26543d6da682810f0c2037877884a66055193237000fca927485288efe5fc08686a823030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989e2f9d2528d9f4005a0cf9347fa40169d72e1c2bc46aaf4e01f12f0baaeb6fc070221b2ff858ae6eac0ff29275961f59a76058a981204b038a98bf6306e429c0b8b66f02dcd0be25ee7e82add46d15c85daa5150c77e68dc303d8ddacfd5543b478c6b005dd68e760d654ae2000000000000009626249fc1c3b675902f0e793d4cb500196fc65c978b52bd87fdd37da5dbda000000ce0e0000000000000000dc5224a6f064ed14d003673de14afbad33ab7d31894bc64ac00300998951564dcf7bf57e71276c565afdd964ecd23e0000000000000000007e77fa074810545c531eaf21778103e37c2f699d942a2c4d6b62de6e88b5144d5705d41105c114debf51305a21de71000b8f28835929382f522c4944d60000470574a51fd1585bb54d17bcd07c533e1af1d3a3ffa496dfa096c420681670b8c2ea834e66ac06001ff061e08831aca985230880133c1995decba554ce8f686fc3db00946f117ae05c13ca29ff6eec0d3928a33f1c6f20c6b8a0000000"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) [ 953.110219][ T22] audit: type=1326 audit(1632231095.733:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8640 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f63f7abe739 code=0x7ffc0000 13:31:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:31:35 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x8040}, 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x4004662b, &(0x7f00000004c0)={0x5154}) 13:31:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:31:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendto$inet(r0, &(0x7f0000000040)="001467de332ba00a5ed9e703aafddffc912617e1eba4c317c24fd70c7171e49897b4627cfc7e33e759662e01040719175b25fc7e9cc9e937000a2a1878e54f7e0e61c6fb586dea1f7491d16d6d9623853fb3ac5ad749683a9efc6d014f382676b754de416352b28076064a661922c827b0c83f0e1306a37ebb97dd934d20e3ee08af9e2cc538961e2409413110df0b8f049c3bee8be144e9c484d6047f1a207a7c15d247822ac72e44b72be5787d37894bb16a4d3df869f7be030abc5ac29a", 0xbf, 0x2004030, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 13:31:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 13:31:35 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) [ 953.232503][ T22] audit: type=1326 audit(1632231095.733:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8640 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7abe739 code=0x7ffc0000 13:31:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:31:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c757466383d312c666d61736b3d30303030303030303030303030303030303230303030302c00060881e7e6820657f37c74cd28314b620a329e286f154d8d118d1b65929d80040eba03a3e5fc0a3c78020ae211059914518c037876d8fa51ce14fc26543d6da682810f0c2037877884a66055193237000fca927485288efe5fc08686a823030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989e2f9d2528d9f4005a0cf9347fa40169d72e1c2bc46aaf4e01f12f0baaeb6fc070221b2ff858ae6eac0ff29275961f59a76058a981204b038a98bf6306e429c0b8b66f02dcd0be25ee7e82add46d15c85daa5150c77e68dc303d8ddacfd5543b478c6b005dd68e760d654ae2000000000000009626249fc1c3b675902f0e793d4cb500196fc65c978b52bd87fdd37da5dbda000000ce0e0000000000000000dc5224a6f064ed14d003673de14afbad33ab7d31894bc64ac00300998951564dcf7bf57e71276c565afdd964ecd23e0000000000000000007e77fa074810545c531eaf21778103e37c2f699d942a2c4d6b62de6e88b5144d5705d41105c114debf51305a21de71000b8f28835929382f522c4944d60000470574a51fd1585bb54d17bcd07c533e1af1d3a3ffa496dfa096c420681670b8c2ea834e66ac06001ff061e08831aca985230880133c1995decba554ce8f686fc3db00946f117ae05c13ca29ff6eec0d3928a33f1c6f20c6b8a0000000"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) [ 953.319363][ T22] audit: type=1326 audit(1632231095.733:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8640 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f63f7abe739 code=0x7ffc0000 13:31:36 executing program 3: rt_sigqueueinfo(0x0, 0x0, 0xffffffffffffffff) [ 953.396396][ T22] audit: type=1326 audit(1632231095.733:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8640 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f7abe739 code=0x7ffc0000 13:31:36 executing program 0: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=[0xfffffffffffffffd, &(0x7f0000000180)='\x00'], 0x0) 13:31:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:31:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) 13:31:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:31:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 13:31:36 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 13:31:36 executing program 4: set_mempolicy(0x3, &(0x7f0000000080)=0x401, 0x5) set_mempolicy(0x6002, &(0x7f0000000040)=0x803, 0x9) 13:31:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="31452e6f9d19a581657482"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fchown(r0, 0x0, 0x0) 13:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b0c651a6e6e7ac2b"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000003c0)=0x5f) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x7fff, 0x0, 0x0, 0x0, 0x0, "000000230500"}) 13:31:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000180)="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", 0x6cf}], 0x1) 13:31:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)={0xd}) 13:31:37 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="e7b1dd79774068f4d12b0000273ed348f17d2d4b654b4908cc914f09000000fb3f", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 13:31:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x149142) write$evdev(r0, &(0x7f00000010c0)=[{{0x77359400}}], 0x200010d8) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f00000000c0)="41d01bde2adbb57e05"}) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 13:31:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "f70b50ea6edb30bbdb1ef8ccc65c0cbcd9566f05d860a85d6bc6ce4d9f5bdbfcb0f0a8d19dab65c21ffc3de9cbbd661ce325a95f77c9f28486c41a4bc730d7e7", "277355504213e651377e5586b051cdb4e809e66cf5a0350146eb6e7e854936fb", [], 0x2040000}) 13:31:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="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", 0xfc) 13:31:37 executing program 0: set_mempolicy(0x3, &(0x7f0000000140)=0x55df, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setlease(r0, 0x400, 0x3) 13:31:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4b45, 0x0) 13:31:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="df"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:31:37 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000580)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000180)}]) 13:31:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4b45, 0x0) 13:31:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 13:31:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) unshare(0x22060400) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) [ 954.360071][ T8740] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 13:31:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x5420, &(0x7f0000001d00)) 13:31:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4b45, 0x0) 13:31:37 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a0015000a0005000800030003feffffff000000000000", 0x39}], 0x1) 13:31:37 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0xb, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 13:31:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4b45, 0x0) 13:31:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:31:37 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0002000000000000aad276"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:37 executing program 5: creat(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) clone3(&(0x7f0000000ac0)={0x140000200, 0x0, &(0x7f0000000440), &(0x7f0000000900), {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002100)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 13:31:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:31:37 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 954.949001][ T8775] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 954.998160][ C0] sd 0:0:1:0: tag#312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 955.007939][ C0] sd 0:0:1:0: tag#312 CDB: opcode=0xe5 (vendor) [ 955.014206][ C0] sd 0:0:1:0: tag#312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 955.023172][ C0] sd 0:0:1:0: tag#312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 955.032135][ C0] sd 0:0:1:0: tag#312 CDB[20]: ba [ 955.101853][ C1] sd 0:0:1:0: tag#265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 955.111698][ C1] sd 0:0:1:0: tag#265 CDB: opcode=0xe5 (vendor) [ 955.118006][ C1] sd 0:0:1:0: tag#265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 955.126965][ C1] sd 0:0:1:0: tag#265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 955.135926][ C1] sd 0:0:1:0: tag#265 CDB[20]: ba 13:31:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r1, 0x8927, &(0x7f0000000000)={0x0, @ethernet={0x0, @random="4daed6c720c0"}, @nl=@unspec, @ethernet={0x0, @remote}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 13:31:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$int_out(r0, 0x80804531, &(0x7f0000001180)) 13:31:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:31:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) 13:31:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='schedstat\x00') fcntl$lock(r0, 0x40c, &(0x7f0000000100)) 13:31:37 executing program 5: creat(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) clone3(&(0x7f0000000ac0)={0x140000200, 0x0, &(0x7f0000000440), &(0x7f0000000900), {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002100)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 13:31:38 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14a1, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) 13:31:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:31:38 executing program 1: r0 = syz_io_uring_setup(0xa9d, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) 13:31:38 executing program 4: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a02000019002551075c0165ff0ffc02802000030004000500e1000c1e0309008000a000", 0x33a) [ 955.359936][ C0] sd 0:0:1:0: tag#276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 955.369728][ C0] sd 0:0:1:0: tag#276 CDB: opcode=0xe5 (vendor) [ 955.376000][ C0] sd 0:0:1:0: tag#276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 955.384952][ C0] sd 0:0:1:0: tag#276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 955.393917][ C0] sd 0:0:1:0: tag#276 CDB[20]: ba 13:31:38 executing program 2: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000005880), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x0) 13:31:38 executing program 1: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x0, 0x0) [ 955.439731][ T8839] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.4'. [ 955.489739][ T8839] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.4'. [ 955.504625][ T8850] new mount options do not match the existing superblock, will be ignored [ 955.530881][ T8850] new mount options do not match the existing superblock, will be ignored 13:31:38 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000572c0)={0x0, [], 0x0, "03e2819d3e4a7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clone3(&(0x7f0000007080)={0x60021100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:31:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="330e0000000000000000a8"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:38 executing program 2: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x13c, r1, 0x605, 0x0, 0x0, {0x1, 0x5}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x02\x80\x03l\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\t{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x02CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x6, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x13c}, 0x1, 0xf000000}, 0x0) 13:31:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 13:31:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) set_mempolicy(0x2, &(0x7f0000000000)=0x5, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @loopback}, 0x10) 13:31:38 executing program 5: creat(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) clone3(&(0x7f0000000ac0)={0x140000200, 0x0, &(0x7f0000000440), &(0x7f0000000900), {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002100)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 13:31:38 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x27) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:31:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) set_mempolicy(0x2, &(0x7f0000000000)=0x5, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @loopback}, 0x10) 13:31:38 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x3f7}, 0x10}}, 0x0) [ 956.190535][ C1] sd 0:0:1:0: tag#277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.200304][ C1] sd 0:0:1:0: tag#277 CDB: opcode=0xe5 (vendor) [ 956.206576][ C1] sd 0:0:1:0: tag#277 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.215538][ C1] sd 0:0:1:0: tag#277 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.224500][ C1] sd 0:0:1:0: tag#277 CDB[20]: ba 13:31:38 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) 13:31:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) set_mempolicy(0x2, &(0x7f0000000000)=0x5, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @loopback}, 0x10) 13:31:39 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) [ 956.281734][ C1] sd 0:0:1:0: tag#278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.291490][ C1] sd 0:0:1:0: tag#278 CDB: opcode=0xe5 (vendor) [ 956.297732][ C1] sd 0:0:1:0: tag#278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.306717][ C1] sd 0:0:1:0: tag#278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.315683][ C1] sd 0:0:1:0: tag#278 CDB[20]: ba 13:31:39 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000572c0)={0x0, [], 0x0, "03e2819d3e4a7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clone3(&(0x7f0000007080)={0x60021100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:31:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x3}]}, 0x14, 0x0) 13:31:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) set_mempolicy(0x2, &(0x7f0000000000)=0x5, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @loopback}, 0x10) 13:31:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 13:31:39 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) [ 956.404348][ C1] sd 0:0:1:0: tag#279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.414142][ C1] sd 0:0:1:0: tag#279 CDB: opcode=0xe5 (vendor) [ 956.420397][ C1] sd 0:0:1:0: tag#279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.429355][ C1] sd 0:0:1:0: tag#279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.438309][ C1] sd 0:0:1:0: tag#279 CDB[20]: ba 13:31:39 executing program 5: creat(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) clone3(&(0x7f0000000ac0)={0x140000200, 0x0, &(0x7f0000000440), &(0x7f0000000900), {}, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002100)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 13:31:39 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x27) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:31:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 13:31:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x0) io_submit(r4, 0x4, &(0x7f0000002780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x4e}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="30de8780e5c7c3b66dd56191d69b1501b4f6fbcffdeb6916543386ab0a38d9c2659acc45231bb42bbd4d8a60b9178f212eed90b76e98b54697781077effaf518d737bd068e28316f60095e14ec5276c706c08e08a32f8e2de3ab4c755f6f4061df50d17474b68dfe2dc48a45db5febfe713782e5c1adb44664bebdbc95573d7eee90de2454e341dbc5a4b57e002c773e85dcca2a141dfc15485cb198448fb45745445d87657463dc328c870f07720fa8054611cbcc2092a951e1212ae46d37e0d43bbc5abb37b28fbb70866446658021c0e96b20618713fe9003e549f0e8", 0xde, 0x100, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="ffaccad637ddba77bd3f70daaddec30dd7c42619c0572664129a27b16ba83738ed7800791f13dcf33a3f54dc1a4fa09f83d2f132be174e3d8bd15fd0b375d049cb6b38858445e2cb646fb8f5529ede1390f5a024216498d726040d625cc6cc7ca0439a7ea7a46b2d6db93b6e8f0ef071bf6bf320cb140bf6aba677d8d0cad437410b15fd6109ecd22aab5ef35e6444e84d81e1be93ca7bcfe05720b92dc70d22c419cc72", 0xa4, 0x8000, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000002700)="c1505128daf1695027c44f72e43be069839f3f23c350eaabe6d1104273f40c0715783b027d6098d54d8e23b55cbf472cac957db0db1806a654d8e71c64c35f680ed9d8eeaa05539a6cf19dc3e61f69cde8c3e0f7d42ee6a339f42990dfc20d15e44be888bdc7cd8ae635d19873fe34782b4d", 0x72, 0x7}]) 13:31:39 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) 13:31:39 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000572c0)={0x0, [], 0x0, "03e2819d3e4a7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clone3(&(0x7f0000007080)={0x60021100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 956.591592][ C0] sd 0:0:1:0: tag#280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.601542][ C0] sd 0:0:1:0: tag#280 CDB: opcode=0xe5 (vendor) [ 956.607777][ C0] sd 0:0:1:0: tag#280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.616737][ C0] sd 0:0:1:0: tag#280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.625682][ C0] sd 0:0:1:0: tag#280 CDB[20]: ba 13:31:39 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)={0x100, 0x101}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 13:31:39 executing program 3: r0 = socket(0xa, 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 956.640499][ C0] sd 0:0:1:0: tag#281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 956.650276][ C0] sd 0:0:1:0: tag#281 CDB: opcode=0xe5 (vendor) [ 956.656563][ C0] sd 0:0:1:0: tag#281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.665525][ C0] sd 0:0:1:0: tag#281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.674481][ C0] sd 0:0:1:0: tag#281 CDB[20]: ba 13:31:39 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000572c0)={0x0, [], 0x0, "03e2819d3e4a7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clone3(&(0x7f0000007080)={0x60021100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:31:39 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0) 13:31:39 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)={0x100, 0x101}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 13:31:39 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x27) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 956.785545][ T22] audit: type=1326 audit(1632231099.473:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8955 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49088cb739 code=0x0 [ 956.821528][ C1] sd 0:0:1:0: tag#282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 13:31:39 executing program 3: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x20, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", ""]}, 0x20}}, 0x0) 13:31:39 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)={0x100, 0x101}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 13:31:39 executing program 5: r0 = fork() waitid(0x1, r0, 0x0, 0x8, 0x0) tgkill(r0, r0, 0x16) tgkill(r0, r0, 0x12) 13:31:39 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000080)={0x100, 0x101}, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 13:31:39 executing program 3: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x20, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", ""]}, 0x20}}, 0x0) [ 956.831292][ C1] sd 0:0:1:0: tag#282 CDB: opcode=0xe5 (vendor) [ 956.837535][ C1] sd 0:0:1:0: tag#282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 956.846495][ C1] sd 0:0:1:0: tag#282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 956.855620][ C1] sd 0:0:1:0: tag#282 CDB[20]: ba [ 956.869287][ T8967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8967 comm=syz-executor.3 13:31:39 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}}, r1, 0x0, r0, 0x0) 13:31:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 13:31:39 executing program 4: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x27) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:31:39 executing program 3: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x20, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", ""]}, 0x20}}, 0x0) [ 956.949755][ T8984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8984 comm=syz-executor.3 [ 957.020489][ T8994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8994 comm=syz-executor.3 [ 957.617119][ T22] audit: type=1326 audit(1632231100.303:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=8955 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49088cb739 code=0x0 13:31:40 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f3c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x1, 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x40000003, 0x0, 0x0) 13:31:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 13:31:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1b}) 13:31:40 executing program 0: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}, 0x0) syz_io_uring_setup(0x6ca8, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000f2d000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x62c1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffff8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 13:31:40 executing program 3: socket(0x10, 0x3, 0x1000) [ 957.691718][ T9005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9005 comm=syz-executor.3 13:31:40 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:31:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8000}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xd2d7}) 13:31:40 executing program 5: r0 = fork() waitid(0x1, r0, 0x0, 0x8, 0x0) tgkill(r0, r0, 0x16) tgkill(r0, r0, 0x12) 13:31:40 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}, 0x0) syz_io_uring_setup(0x6ca8, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000f2d000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x62c1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffff8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 13:31:40 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x118, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:40 executing program 5: r0 = fork() waitid(0x1, r0, 0x0, 0x8, 0x0) tgkill(r0, r0, 0x16) tgkill(r0, r0, 0x12) 13:31:40 executing program 3: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2a4) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2000201) 13:31:40 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) 13:31:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 13:31:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 13:31:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x1, 0x7) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @broadcast}, 0x10) 13:31:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_confh={0x10}, 0x0) 13:31:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb06131d540000000000002200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) 13:31:40 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="6b08dd07d829f7003adabd"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 13:31:40 executing program 0: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}, 0x0) syz_io_uring_setup(0x6ca8, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000f2d000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x62c1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffff8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 13:31:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x1, 0x7) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @broadcast}, 0x10) 13:31:40 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="6b08dd07d829f7003adabd"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:40 executing program 3: unshare(0x48040480) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0xfef0, 0x0, 0x0, &(0x7f00000029c0)=ANY=[]) lseek(r0, 0x9, 0x0) [ 958.069012][ T22] audit: type=1326 audit(1632231100.753:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:31:40 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 13:31:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb06131d540000000000002200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) 13:31:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x1, 0x7) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @broadcast}, 0x10) [ 958.130672][ T22] audit: type=1326 audit(1632231100.753:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:31:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d9c40000000ffffffe687cfac79b04c2e1fea4b7a3d018ea6a7efefe4d21810262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fb", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x4d) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:40 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 13:31:40 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x1, 0x7) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @broadcast}, 0x10) 13:31:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb06131d540000000000002200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) 13:31:40 executing program 0: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x40}}, 0x0) syz_io_uring_setup(0x6ca8, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000f2d000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x62c1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffff8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 13:31:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) [ 958.222253][ T22] audit: type=1326 audit(1632231100.753:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:31:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb06131d540000000000002200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) [ 958.318381][ T22] audit: type=1326 audit(1632231100.753:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 [ 958.354679][ T22] audit: type=1326 audit(1632231100.753:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 [ 958.384369][ T22] audit: type=1326 audit(1632231100.753:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 [ 958.409461][ T22] audit: type=1326 audit(1632231100.753:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 [ 958.434923][ T22] audit: type=1326 audit(1632231100.753:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9082 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:31:43 executing program 3: unshare(0x400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) 13:31:43 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="6b08dd07d829f7003adabd"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 13:31:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) 13:31:43 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 13:31:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0xf, 0x0, 0x0) 13:31:43 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x286800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) 13:31:43 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="6b08dd07d829f7003adabd"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:43 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xcd48}], 0x1, 0x0) 13:31:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 13:31:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0xf, 0x0, 0x0) 13:31:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5405, 0xfffffffffffffffd) 13:31:43 executing program 2: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)}, 0x20, 0x0, 0x0) 13:31:43 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 13:31:44 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 13:31:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "85ff01000000000009000000000400"}) read(r2, &(0x7f0000000200)=""/68, 0x44) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) 13:31:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0xf, 0x0, 0x0) 13:31:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0xd, 0x0) 13:31:44 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000403000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) msync(&(0x7f0000396000/0xc00000)=nil, 0xc00000, 0x6) mincore(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x0) 13:31:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@generic='5']}, 0x14}], 0x1}, 0x0) 13:31:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0xff48, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID]}, 0x40}}, 0x0) 13:31:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0xf, 0x0, 0x0) 13:31:44 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_setup(0x45db, &(0x7f0000000480)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r3, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58b, 0x0, 0x0, 0x0, 0x0) 13:31:44 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000403000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) msync(&(0x7f0000396000/0xc00000)=nil, 0xc00000, 0x6) mincore(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x0) 13:31:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x3c}, {0x6}]}, 0x10) sendto$unix(r0, &(0x7f0000000000)="2300ba0d90c4ea034886e976310c0f330e22227219acb0a190b867a12f71865563235d", 0x23, 0x0, 0x0, 0x0) 13:31:44 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000403000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) msync(&(0x7f0000396000/0xc00000)=nil, 0xc00000, 0x6) mincore(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x0) 13:31:45 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 13:31:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}]}, 0x20}}, 0x0) 13:31:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r3) 13:31:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x8040) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x20}}], 0x2, 0x0) 13:31:45 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000403000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) msync(&(0x7f0000396000/0xc00000)=nil, 0xc00000, 0x6) mincore(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x0) 13:31:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "85ff01000000000009000000000400"}) read(r2, &(0x7f0000000200)=""/68, 0x44) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) 13:31:45 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="5edb0835ba2ff1f43f3052"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001640)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in6=@mcast1}, @in6=@remote}}, 0x40}}, 0x0) 13:31:45 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x6) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 13:31:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}]}, 0x20}}, 0x0) 13:31:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) 13:31:45 executing program 0: socketpair(0x1, 0x80805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) [ 962.966417][ T9236] 9pnet_virtio: no channels available for device 127.0.0.1 13:31:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "85ff01000000000009000000000400"}) read(r2, &(0x7f0000000200)=""/68, 0x44) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) 13:31:46 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x6) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 13:31:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}]}, 0x20}}, 0x0) 13:31:46 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x601, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ac", 0x1}, {&(0x7f0000001240)="a1", 0x1}], 0x2, 0x800, 0x0) 13:31:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() 13:31:46 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x56, &(0x7f00000001c0)="8d31e1831569390090e35400a44273610b2412bdf20b1e0000e2990b1dd2a357b264c8747c78376e18000006000000539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c482a8a1018da3"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) fork() tkill(r1, 0x34) 13:31:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='discard,uni_xlate=1,uni_xlate=0,nonumtail=0,usefree,iocharset=macgreek,dos1xfloppy']) 13:31:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}]}, 0x20}}, 0x0) 13:31:46 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x6) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 13:31:46 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/63, 0x3f) 13:31:46 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x601, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ac", 0x1}, {&(0x7f0000001240)="a1", 0x1}], 0x2, 0x800, 0x0) [ 963.823949][ T9261] 9pnet_virtio: no channels available for device 127.0.0.1 13:31:46 executing program 5: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 963.900541][ T9276] 9pnet_virtio: no channels available for device 127.0.0.1 13:31:47 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x601, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ac", 0x1}, {&(0x7f0000001240)="a1", 0x1}], 0x2, 0x800, 0x0) 13:31:47 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) 13:31:47 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x6) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 13:31:47 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x3, 0x5c, @time, {}, {}, @ext={0x197, &(0x7f00000002c0)="8d31e1831569390090e35400a44273610b1dd2a357b264c8747c78376e18cd3d0000000006000100539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c482a8a1018da350e4d0d35c74150004971cb84ecb106e40000000000000007b11308ae098742766cd06c98b2f8854a262476f818dfde6289101855dfa9065e3b2c1c96bc78114c994b0d618c419583ffc3345db93f4a01be0cc57846c82e226e2a50eef225b93f9800e3c16bc34b3f7f7fd2bb1ed15ca3b97aacea0e31e0cc7b5f564d08d1618580c8ec76619559f5a05f5db148880dcb773bde621799ef9536c6b0f74db6d305cc0be2f5350794170d18e622d09f049c6958d0610dae9494e8b389f6d410d82255c7f852c48521650cfd6996bbe8b5e3fbd714e59021f0df26316396590660800000000000000ab5587531fb069d32c4afecc9c919e09d54d4d939d7d61dd393a7af13aeffbf0f76d4390e0c3f800fbaec475aea1b5f04024bfed77e521a7dfde1c864244b5a4cf7ce1fc5b7eaff283d7b311b89662fb1c674485bdaf2c82b3189b85fc88b30d9f"}}], 0x1c) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x80, 0x3d, 0xa2, 0x0, 0x0, 0x0, 0x62282, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3a9, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x20, 0x5, 0x6, 0x3, 0x49e6, 0xf0000000, 0x7, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x2) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) 13:31:47 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4008fd, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:31:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "85ff01000000000009000000000400"}) read(r2, &(0x7f0000000200)=""/68, 0x44) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) 13:31:47 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x601, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ac", 0x1}, {&(0x7f0000001240)="a1", 0x1}], 0x2, 0x800, 0x0) 13:31:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 13:31:47 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="fcb168946c4c", 0x6}]) 13:31:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xc000, 0x1) 13:31:47 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x8e, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:47 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000004c0)=0xfff, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x3f) io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e) [ 964.699771][ T9303] 9pnet_virtio: no channels available for device 127.0.0.1 13:31:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000ac0), 0x0) 13:31:48 executing program 4: clone3(&(0x7f0000000880)={0xc107000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:31:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0xffffffe3) unlink(&(0x7f00000000c0)='./bus\x00') r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./bus\x00', 0x440006dc) 13:31:48 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88804, &(0x7f0000000000)={0xa, 0x4e1b, 0x0, @remote, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 13:31:48 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000004c0)=0xfff, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x3f) io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e) 13:31:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000ec0)={&(0x7f0000000000), 0xc, &(0x7f0000000e80)={&(0x7f0000000080)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x5, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xffffffffffffff73, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x58}}, 0x0) 13:31:48 executing program 5: syz_io_uring_setup(0x4b42, &(0x7f0000000000)={0x0, 0xbcb3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) 13:31:48 executing program 4: socketpair(0x10, 0x2, 0x2, &(0x7f0000000140)) 13:31:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000000004000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)) 13:31:48 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000004c0)=0xfff, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x3f) io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e) 13:31:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c000000100008", 0x23, 0x11100}], 0x1, &(0x7f0000000040)) 13:31:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2}}) 13:31:48 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000708000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 13:31:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x0) 13:31:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65ca, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xfffffff9, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0200e379c8070000000000001000406b9166f33604f7baf36734ba8b0ba2a541cacd4ad3a28c2ff0", 0x28, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}}], 0x1, 0x12000, 0x0) 13:31:48 executing program 1: r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x70c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000004c0)=0xfff, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x3f) io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e) 13:31:48 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="060000000000000000003d"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x3d) 13:31:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:48 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2004000) 13:31:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/45, 0x2d}, {0x0, 0xd3efff7f}], 0x2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000030101"], 0x13c}}, 0x0) 13:31:48 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13b, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:48 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) exit_group(0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/200, 0xc8}], 0x1, 0x0, 0x0) 13:31:48 executing program 5: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 966.010471][ T9380] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.010471][ T9380] program syz-executor.2 not setting count and/or reply_len properly [ 966.042147][ T9390] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.042147][ T9390] program syz-executor.2 not setting count and/or reply_len properly 13:31:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65ca, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xfffffff9, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0200e379c8070000000000001000406b9166f33604f7baf36734ba8b0ba2a541cacd4ad3a28c2ff0", 0x28, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}}], 0x1, 0x12000, 0x0) 13:31:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:48 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x40}) [ 966.084767][ T9395] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.111231][ T9395] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. 13:31:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xa4}, {0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0'}, 0x4) 13:31:48 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000003c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 13:31:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65ca, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xfffffff9, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0200e379c8070000000000001000406b9166f33604f7baf36734ba8b0ba2a541cacd4ad3a28c2ff0", 0x28, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}}], 0x1, 0x12000, 0x0) [ 966.139370][ T9409] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.139370][ T9409] program syz-executor.1 not setting count and/or reply_len properly [ 966.205729][ T9416] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.205729][ T9416] program syz-executor.2 not setting count and/or reply_len properly [ 966.240501][ T9423] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; 13:31:48 executing program 5: syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) clone3(&(0x7f0000003b00)={0x8080000, &(0x7f00000038c0), &(0x7f0000003900), &(0x7f0000003940), {}, 0x0, 0x0, &(0x7f0000003a40)=""/98, &(0x7f0000003ac0)=[0x0, 0x0, 0x0], 0x3}, 0x58) 13:31:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) clock_gettime(0x0, &(0x7f0000002300)) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)=""/31, 0x1f}], 0x1}}], 0x2, 0x40000022, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="b0", 0x1}], 0x1) 13:31:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) [ 966.240501][ T9423] program syz-executor.1 not setting count and/or reply_len properly 13:31:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x65ca, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xfffffff9, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0200e379c8070000000000001000406b9166f33604f7baf36734ba8b0ba2a541cacd4ad3a28c2ff0", 0x28, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}}], 0x1, 0x12000, 0x0) 13:31:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x31, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 13:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a76322000600"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) dup3(r1, r0, 0x0) 13:31:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) [ 966.316735][ T9432] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.316735][ T9432] program syz-executor.1 not setting count and/or reply_len properly [ 966.344586][ T9436] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.344586][ T9436] program syz-executor.2 not setting count and/or reply_len properly 13:31:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c0a, 0x0) 13:31:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @dev}, 0x10, 0x0}}], 0x1, 0x0) 13:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x27e2}, {&(0x7f0000000340)="7bd5ce74ac4a025d87dba0180aae92fc", 0x10, 0x6}], 0x0, &(0x7f00000004c0)=ANY=[]) 13:31:49 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x17e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 13:31:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="8a1020c78d4cbe87ae65b2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 13:31:49 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @dev}, 0x10, 0x0}}], 0x1, 0x0) 13:31:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="8a1020c78d4cbe87ae65b2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 966.539991][ T9461] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 966.539991][ T9461] program syz-executor.2 not setting count and/or reply_len properly [ 966.568071][ T9467] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:31:49 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @dev}, 0x10, 0x0}}], 0x1, 0x0) 13:31:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="8a1020c78d4cbe87ae65b2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343237383831383900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040000c00000000000000d2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d2f4655fd2f4655fd2f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d2f4655fd2f4655fd2f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f0000011000)="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"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012000)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000012b00)) 13:31:49 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000280)=""/84, 0x54) [ 966.777928][ T9489] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 966.785711][ T9493] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:31:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="8a1020c78d4cbe87ae65b2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:31:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x3b) fcntl$notify(r3, 0x402, 0x0) 13:31:49 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() setxattr$incfs_size(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) write$binfmt_script(r0, 0x0, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) 13:31:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @dev}, 0x10, 0x0}}], 0x1, 0x0) 13:31:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:49 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x20}, {0x35}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:31:49 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="0010"]) 13:31:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f00000000c0), 0xc) close(r0) [ 966.966563][ T22] kauditd_printk_skb: 127 callbacks suppressed [ 966.966574][ T22] audit: type=1326 audit(1632231109.653:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x0 [ 966.986390][ T9525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:31:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f00000000c0), 0xc) close(r0) 13:31:49 executing program 4: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del, 0x9) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 967.011489][ T9526] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.031560][ T9524] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 967.045409][ T9530] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:31:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f00000000c0), 0xc) close(r0) 13:31:49 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) [ 967.180096][ T9544] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 13:31:49 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() setxattr$incfs_size(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) write$binfmt_script(r0, 0x0, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) 13:31:49 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sip', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000240)={0x18, 0x10, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000542563f501c6a342014f639805de23ca91468d5094b72d", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300040000000200090008000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090001000000"], 0xd0}}, 0x880) sendto$inet6(r0, &(0x7f00000002c0)="f383e3c75706c69890860214aaddb68311528922ac3326ae809d80185d7453744239d0693893bb1971d27efc4d4d901ce800be77ca6682deccb1eacc6ac42640acc6c947ab236c", 0x47, 0x41, &(0x7f0000000340)={0xa, 0x4e23, 0x8000, @private0={0xfc, 0x0, '\x00', 0x6}, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) 13:31:49 executing program 4: kexec_load(0x0, 0x2, &(0x7f00000022c0)=[{0x0}, {0x0, 0x0, 0x0, 0x2}], 0x0) 13:31:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f00000000c0), 0xc) close(r0) [ 967.288760][ T9550] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:31:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x6d, &(0x7f00000003c0)="8d31e183156939000000e28c0b1dd2a357b265c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f8bb2965cd7e1292aaa6375f12e594a37c9686d403d3a823ec2117496b2dd4837"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13:31:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea, 0xffffffa1}) 13:31:50 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:31:50 executing program 3: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x100) r0 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_timedsend(r0, &(0x7f0000000800)="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", 0x2000, 0x9, &(0x7f0000001840)) 13:31:50 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() setxattr$incfs_size(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) write$binfmt_script(r0, 0x0, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) [ 967.793618][ T22] audit: type=1326 audit(1632231110.483:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=9519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfec9d2739 code=0x0 13:31:50 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840004000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 13:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="69c808000000000000e479"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:50 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:31:50 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(({%%/)\x00') 13:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="69c808000000000000e479"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 967.898851][ T23] kernel write not supported for file 9564/task/9570/uid_map (pid: 23 comm: kworker/1:1) [ 967.917831][ T9576] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. 13:31:50 executing program 5: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) 13:31:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000230000000008e293210001c0000000000000000000000000000000ea05001ec20300000000000002fe000000bc0002", 0x43) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:31:50 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="69c808000000000000e479"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 967.976822][ T23] kernel write not supported for file 9584/task/9589/uid_map (pid: 23 comm: kworker/1:1) 13:31:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0xa7b}]}, 0x20}], 0x1}, 0x0) [ 968.071813][ T23] kernel write not supported for file 9601/task/9606/uid_map (pid: 23 comm: kworker/1:1) 13:31:50 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[], 0xffffffe3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() setxattr$incfs_size(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) write$binfmt_script(r0, 0x0, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) 13:31:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'sit0\x00', @ifru_hwaddr=@link_local}) 13:31:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13:31:50 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:31:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000004b40)=@nfs={0x90, 0x24, {0x0, 0x0, 0x0, 0x80, "2c8c066efaae352bd9ca6879333dc2553f592094ec45f9f2f49f8c76f1ad888b645ad201943f09fae39c92fc8e3522096d6bd6f26a1f8d2a601b14ae916ada0ad36f0d79351df1cb930bef2c03702f0471ecfca81739ed75ddc2b2e1c82d2432bd15c7b63bf979f65b8aebc7f95f3a01222da825081c5f4597df00eb6e6de2bd"}}, 0x0) 13:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="69c808000000000000e479"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 13:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c5adf649476f8ba515397e"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:31:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000001440)={0x1f00, 0x0, 0xffffff80}) 13:31:50 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1, 0x0, 0x51}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:31:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') vmsplice(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="06", 0x1}], 0x1, 0x0) 13:31:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x46}}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r0, r1) setsockopt$inet_mtu(r2, 0x0, 0x4, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 968.257572][ T5] kernel write not supported for file 9614/task/9620/uid_map (pid: 5 comm: kworker/0:0) 13:31:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13:31:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x6c}}, 0x0) 13:31:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0xc, r0}) 13:31:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x20002e40}], 0x1}, 0x12100) sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000900)='&', 0x20000901}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40002101) getpgrp(0x0) 13:31:51 executing program 1: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 13:31:51 executing program 2: rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x3) 13:31:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x501000, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) pwritev(r1, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47ffffe}], 0x1, 0x400fa7f, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000002980)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0}}, {{&(0x7f0000002840)=@in, 0xf, 0x0}}], 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)="fea173664c39fcb57fa5f9b5c1a776604be4", 0x12, 0x3}], 0x248b2, &(0x7f00000004c0)=ANY=[@ANYBLOB="736d61636b66736465663d65787434002c657569643e7cedad04b212b91c37f90824e76a90214affb2a29e2104efefb696175952cb7379abbbc0a4d316be12bd8411f909155286a5de4c372cd9e1819f4dd891250dd9d44bfc6864c3c8cc7a475931fca065c5f9378643da0d756b10e31d32df631d2987228d42b6143b2b47e45739321a795261b5bd233ab3703fc1034e9bd725983591c351ead5d159389b", @ANYRESDEC, @ANYBLOB=',func=PATH_CHECK,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) 13:31:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 13:31:51 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x127, &(0x7f0000001680)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x34) 13:31:51 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13:31:51 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 13:31:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) unshare(0x400) connect$unix(r0, &(0x7f00000067c0)=@abs, 0x6e) 13:31:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="3f2103cfd7fb", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:31:51 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1, 0x0, 0x51}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:31:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x20002e40}], 0x1}, 0x12100) sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000900)='&', 0x20000901}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40002101) getpgrp(0x0) 13:31:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1}, 0x0) [ 969.196896][ T9685] SELinux: duplicate or incompatible mount options 13:31:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x18, &(0x7f0000000000), 0x20a154cc) 13:31:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 13:31:52 executing program 1: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 13:31:52 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='\x00\x00\x00P\a\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\b\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'F\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P\x94p\xdd\xe9\xc6T2\xba\xc4\xd7\xf5\xfd5\a`=\xe51\xc7\xf2\x00\x00_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9fE\xad\xa4\xb5\f\xef\x87g\xb6\xabW\xac\rP\xf4\xb7\xc8\xaajnW{1p\xb3IP \xc2\x00\x8a\xcf~4\x83\n\r\x80\x10\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8\x00\x00\x00\x00\x00\x00', 0x5) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 13:31:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 13:31:52 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1, 0x0, 0x51}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:31:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x20002e40}], 0x1}, 0x12100) sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000900)='&', 0x20000901}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40002101) getpgrp(0x0) 13:31:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x25, 0x0, 0x9}, {}]}) 13:31:52 executing program 5: pselect6(0x8, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) fork() 13:31:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 13:31:52 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00') chdir(&(0x7f0000000000)='./file0/file0\x00') 13:31:52 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="00000000bac1beebfe06aba86a4d84b68bb205dd5bafdf7358c58a256396e18d9b038e727417c5d4624daea12b88a67eb9761c2e85724c57c52198e21991b05b2128e75ec8a9b2ef09cdabf718ba0d35c9f8c079e3a6f4e8a9baf89968bf9593fa8ff9fa8f898d92c426d1f35997bab89cce8b00bed02221e5df1897e93c9c9758bd4422570568813aa92776f33a357656552fb36289b98cdf4d7e1d52bc0535406d739735de1ee67e0451751f28b42c5cc7c00cb59a9041015ac801d6aa7d01851f9abbb0fd411943c6ae42bf9d589600ea21b832c68aabc2f1e897c1ce5dc46909ad3c8b0d77d8abdf6d3466dbe784882e5a31d610f2a7", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 13:31:52 executing program 4: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = accept(r0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1}, 0xc) r4 = dup2(r2, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002c00)) 13:31:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000380)='u', 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffd}]) 13:31:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x2400a0, 0x0) flistxattr(r0, 0x0, 0x0) 13:31:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) 13:31:53 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x131, 0x0) 13:31:53 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 13:31:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x2400a0, 0x0) flistxattr(r0, 0x0, 0x0) 13:31:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1, 0x0, 0x51}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:31:53 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:53 executing program 2: sysfs$2(0x2, 0x3, &(0x7f00000001c0)=""/103) 13:31:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x20002e40}], 0x1}, 0x12100) sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000900)='&', 0x20000901}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40002101) getpgrp(0x0) 13:31:53 executing program 1: clone(0x200b64065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) 13:31:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a6, &(0x7f0000000380)="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"/422}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3a) 13:31:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x2400a0, 0x0) flistxattr(r0, 0x0, 0x0) 13:31:53 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:53 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x2400a0, 0x0) flistxattr(r0, 0x0, 0x0) 13:31:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 13:31:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000110568fe0700000000000700ff3f020000003b1500010000000004001a000a00080014a4ee1ee438b53a45a17892cc593cb22d", 0x39}], 0x1) 13:31:54 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:31:54 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)='\t', 0x1}], 0x3, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x120, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x22) 13:31:54 executing program 5: r0 = syz_io_uring_setup(0x889, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x9, 0x0, 0x1) 13:31:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa, &(0x7f0000000140)="8d310783156939000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x3) tkill(r0, 0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x40) 13:31:54 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0xd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc0bc5310, &(0x7f00000001c0)) write$sndseq(r1, 0x0, 0x0) tkill(r0, 0x7) 13:31:54 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x8, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@llc={0x1a, 0x312, 0x81, 0x5, 0x3, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000f80)="1575d8bab2d0ff6939534f1b83767387bcd59252d9c27e3dac387df04928c4066a9435a310a66fa05e88148c16ca9fe20b42b93a69811c09add57d2f3b30155009dac8250e8b834005698f0b15a5154f3f49c1a600b3b6401acd93d0b16b91f9272850ff0b598e7b50f58f1ee3fad875af2ec267ab8a119878916d282c6a66069c48d901a1d067e8788f7db34c0000ce11c96a19bdddcc1d176fd1c15f152fca7377abba9868004857753f10b4eb86bd7b6c8e20883cb58848685da5", 0xbc}], 0x2, &(0x7f0000000240)=[{0x20, 0x0, 0x6, "7a280317c598eafdcc5d"}, {0x80, 0x10c, 0x1, "45e60f2590575a0f8cc6662094c876b9b135185b42f10dd943eeac2224cc2041110d858e2dfa0cd47d2a9b09634c36fb5d42c923faacb811ee9a80df5d03ade0f37bf64350965f63834e77bc748846a5e2e774f98399ec21879f4c4fd83379b5dd621076e5585bf849c391"}], 0xa0}, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) close(r1) 13:31:54 executing program 4: r0 = socket(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) 13:31:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 13:31:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x45}, {0x6}]}, 0x10) write$binfmt_elf64(r0, 0x0, 0x0) [ 971.964850][ T9828] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 972.025554][ T9846] ref_ctr_offset mismatch. inode: 0x361e offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 972.037172][ C1] sd 0:0:1:0: tag#307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 972.046948][ C1] sd 0:0:1:0: tag#307 CDB: opcode=0xe5 (vendor) [ 972.053211][ C1] sd 0:0:1:0: tag#307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 972.062181][ C1] sd 0:0:1:0: tag#307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:31:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:31:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000040)) 13:31:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) fcntl$setstatus(r1, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r1, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r7, 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa0000000) rmdir(&(0x7f0000000080)='./control\x00') 13:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xfffffffffffffff8}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) [ 972.071136][ C1] sd 0:0:1:0: tag#307 CDB[20]: ba [ 972.084457][ C1] sd 0:0:1:0: tag#308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 972.094212][ C1] sd 0:0:1:0: tag#308 CDB: opcode=0xe5 (vendor) [ 972.100473][ C1] sd 0:0:1:0: tag#308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 972.109403][ C1] sd 0:0:1:0: tag#308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 972.118355][ C1] sd 0:0:1:0: tag#308 CDB[20]: ba 13:31:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000808d9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0x2051c) 13:31:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00002b7000/0x4000)=nil, 0x4000, 0x0, 0x121032, 0xffffffffffffffff, 0x0) 13:31:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4c, &(0x7f0000000080)={0x0, 0x20}) 13:31:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:31:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) r3 = fcntl$dupfd(r1, 0x0, r0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@can={0x1d, r2}, 0x80) 13:31:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000008) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 13:31:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="39000000130003475fae7cdad7254130e500000001000000450000002500000008001a00050002000200000000000006040000000000000000", 0x39}], 0x1) 13:31:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:31:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @multicast}, 0x14, {0x2, 0x0, @local}, 'lo\x00'}) 13:31:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) [ 974.969867][ T9884] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. 13:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:31:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:31:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 13:31:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:32:00 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:32:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x563, 0x0, 0x0, 0x0, 0x0, "b442189dd9ca64dfddd26daf4806d082f60f8b"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x1e00, 0x0, 0x0, 0x0, 0x0, "6e3f4164127740e07913c807b2c5104d18c41f"}) 13:32:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) utimes(&(0x7f00000002c0)='./bus\x00', 0x0) 13:32:00 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0) close(r1) 13:32:00 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 13:32:00 executing program 1: r0 = semget$private(0x0, 0x4, 0x220) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000040)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x5450, 0x0) memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x2) semget$private(0x0, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001180)=0xffffff77) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0)=""/75) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x5452, &(0x7f0000000180)={@rand_addr=' \x01\x00', @local, @loopback}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x29, 0x6, 0x9, 0x8, 0x1c, @mcast1, @loopback, 0x709, 0x7800, 0x3ee800, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x29, 0xff, 0x54, 0xccc, 0x49, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x1000, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="676176cc42158cd8052e42e7da8064c62b14d94ef38c5155c34ef21f971aecc0489c23c408b867f9993fc47afa260c0fc75f9e97289a3f530e9efdd2ab7fd6d84ddd053f72108a7e4648fc2fe17ea63ae26274bf177ad59c18230722f66588e62865527f33db9d5d1501b3c84b84d9dbfd666318670c26fd06e10fe78a253fec77756515b58475f78cd142c680f1e034027e4f723d97c3c0a46b902b215641003257f95f9608faaca52ce0e15782b697cec2de60b42114782b0c5171dd2d4b9622515d523391e1f0097ed57a653213773254c9", 0xd3}, {&(0x7f0000000540)="73ec1aa82ff8019e7fc4574fd5ed24a27880db07baae6d3b4ddcab44431f172084a07b54dbee444da37df43ff998b7ff50b74b7310b144a9dcea324f7805eedfd93d676f2570b6a993b8e808e4bb75106e097de8e83864cd3f7cf838f1052177376cf4b19088a75c2f3fc4604b2f7c29f185a85ee23a5a770e0ac018195ab6b43479c70cc20f3813d2a58fa067ab51ffbf103dc09007306d1989cc797075d3b03e725db4b809843d95a93259a3a21ca846f6d3fd8cfbfdd4801816bfb4216cc509b9113533cf467a4db7ac42a7e4d81018a1056f56fdc236f81cf33c52492e1127e049f94980", 0xe6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="0c0000000000000000000000080000003b7aa0f08e6600000000000000e7e4377b692746e45db206ba1f0c2dc6a89cb9162b186931cb4d7f4448bbfa8159758e073d1c72f5098bcf920ec379c42950f00efb1487f86008bbdc3ae392a9393af569000000000000000001040000000000000000001a6291102e45d6e0bf72ddb2d8d7888fee8adac86ce4a64271c69bdba9717ad4065112288550e7f59e88c1ccf5d19ab747e00e72719f7347", @ANYRES32=0x0, @ANYBLOB="6401014b793455e7757e99ad90650b1d2bd202ac1e01010000000014000000000000001c000000000000c190678b70d851296c00"/67, @ANYRES32=r4, @ANYRES64], 0x168}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="ecca82ac26acae925ee94e4d126bac333d67a4839953811ada3230e066637208fcfe24886f19bfb2dc6793f8216f0cb742365aee6642ff7c41b13bb62b27a1da3d5a2826aa49715ed65a649be7a65d605a461650a6bcfc6988c1fcce07b7e57e90440e75c9af7532f658ba6980fe259ae46417f444aaf9cc4e686281943d1923d9f8104d8836afd27ac8a6ac848ab601903856be551fa8e381a6ebeecec36a788bdb2aebfc6500fb72d3d664baf23bee", 0xb0}, {&(0x7f00000003c0)="4b5f23522128de4295aa57799b1b70a366fc69d2c68a0198983459d11e0d1a4406e16fc20194", 0x26}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="c5fff3ab9c38eaf3c0d461f6b54d3b6b6830c4889ddaa8fd01917b9f6842ee378f890dfb0e24288f1362ccc1660e835b4d0a943305356255ad68c31b01cc6fe29f5c76d573f94e", 0x47}, {&(0x7f0000000980)="69bad60399de30e3a2ee9b165a5e67bdda1d52685562563684bca86826eb906ddd82394e24c85b98959586fc1ce8e3c4ef8841079f4bad5f1fc8aba963c131c85d937684e70b9521a2071d3b20c359b2812d3286a0924f5bf37c0414a9225a1b64b4d84c7a90759f88264227280f982b7de6962c017f67db6c968a065d16c455a1375e6535352e122ead311accae89b862abaf1ec11e2abb6325ce033b68885c217cb328", 0xa4}, {&(0x7f0000000a40)="f30c6b77d3c45cb8a557e5609d411ea25a6830478df459351760d93a3a5a03fadf1379564005a7a8ae10c020c480a6548d902fd3857133e5d39662303f4e6a8a1e131dedb3b2587f65e50a122cdf79af7cdb6c00911c53986db50204da5e28ab1bac3789d6ca0913553b7c7d07c64ef43f90bf08fc99f1a5c7d485276c487a0ab12bb36c9532a898b71a8c15983872166e0441c9c463c06b7d1770a31b39cf2c14c291d0a8a8874aa011054e12cb27a09091afbf60727bb2bff481a97338dc487b839556416ed1480564d613aea6", 0xce}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}], 0x3, 0x20080000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000011c0)) r5 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000180)=""/17) 13:32:00 executing program 1: r0 = semget$private(0x0, 0x4, 0x220) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000040)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x5450, 0x0) memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x2) semget$private(0x0, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001180)=0xffffff77) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0)=""/75) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x5452, &(0x7f0000000180)={@rand_addr=' \x01\x00', @local, @loopback}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x29, 0x6, 0x9, 0x8, 0x1c, @mcast1, @loopback, 0x709, 0x7800, 0x3ee800, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x29, 0xff, 0x54, 0xccc, 0x49, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x1000, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="676176cc42158cd8052e42e7da8064c62b14d94ef38c5155c34ef21f971aecc0489c23c408b867f9993fc47afa260c0fc75f9e97289a3f530e9efdd2ab7fd6d84ddd053f72108a7e4648fc2fe17ea63ae26274bf177ad59c18230722f66588e62865527f33db9d5d1501b3c84b84d9dbfd666318670c26fd06e10fe78a253fec77756515b58475f78cd142c680f1e034027e4f723d97c3c0a46b902b215641003257f95f9608faaca52ce0e15782b697cec2de60b42114782b0c5171dd2d4b9622515d523391e1f0097ed57a653213773254c9", 0xd3}, {&(0x7f0000000540)="73ec1aa82ff8019e7fc4574fd5ed24a27880db07baae6d3b4ddcab44431f172084a07b54dbee444da37df43ff998b7ff50b74b7310b144a9dcea324f7805eedfd93d676f2570b6a993b8e808e4bb75106e097de8e83864cd3f7cf838f1052177376cf4b19088a75c2f3fc4604b2f7c29f185a85ee23a5a770e0ac018195ab6b43479c70cc20f3813d2a58fa067ab51ffbf103dc09007306d1989cc797075d3b03e725db4b809843d95a93259a3a21ca846f6d3fd8cfbfdd4801816bfb4216cc509b9113533cf467a4db7ac42a7e4d81018a1056f56fdc236f81cf33c52492e1127e049f94980", 0xe6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="0c0000000000000000000000080000003b7aa0f08e6600000000000000e7e4377b692746e45db206ba1f0c2dc6a89cb9162b186931cb4d7f4448bbfa8159758e073d1c72f5098bcf920ec379c42950f00efb1487f86008bbdc3ae392a9393af569000000000000000001040000000000000000001a6291102e45d6e0bf72ddb2d8d7888fee8adac86ce4a64271c69bdba9717ad4065112288550e7f59e88c1ccf5d19ab747e00e72719f7347", @ANYRES32=0x0, @ANYBLOB="6401014b793455e7757e99ad90650b1d2bd202ac1e01010000000014000000000000001c000000000000c190678b70d851296c00"/67, @ANYRES32=r4, @ANYRES64], 0x168}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="ecca82ac26acae925ee94e4d126bac333d67a4839953811ada3230e066637208fcfe24886f19bfb2dc6793f8216f0cb742365aee6642ff7c41b13bb62b27a1da3d5a2826aa49715ed65a649be7a65d605a461650a6bcfc6988c1fcce07b7e57e90440e75c9af7532f658ba6980fe259ae46417f444aaf9cc4e686281943d1923d9f8104d8836afd27ac8a6ac848ab601903856be551fa8e381a6ebeecec36a788bdb2aebfc6500fb72d3d664baf23bee", 0xb0}, {&(0x7f00000003c0)="4b5f23522128de4295aa57799b1b70a366fc69d2c68a0198983459d11e0d1a4406e16fc20194", 0x26}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="c5fff3ab9c38eaf3c0d461f6b54d3b6b6830c4889ddaa8fd01917b9f6842ee378f890dfb0e24288f1362ccc1660e835b4d0a943305356255ad68c31b01cc6fe29f5c76d573f94e", 0x47}, {&(0x7f0000000980)="69bad60399de30e3a2ee9b165a5e67bdda1d52685562563684bca86826eb906ddd82394e24c85b98959586fc1ce8e3c4ef8841079f4bad5f1fc8aba963c131c85d937684e70b9521a2071d3b20c359b2812d3286a0924f5bf37c0414a9225a1b64b4d84c7a90759f88264227280f982b7de6962c017f67db6c968a065d16c455a1375e6535352e122ead311accae89b862abaf1ec11e2abb6325ce033b68885c217cb328", 0xa4}, {&(0x7f0000000a40)="f30c6b77d3c45cb8a557e5609d411ea25a6830478df459351760d93a3a5a03fadf1379564005a7a8ae10c020c480a6548d902fd3857133e5d39662303f4e6a8a1e131dedb3b2587f65e50a122cdf79af7cdb6c00911c53986db50204da5e28ab1bac3789d6ca0913553b7c7d07c64ef43f90bf08fc99f1a5c7d485276c487a0ab12bb36c9532a898b71a8c15983872166e0441c9c463c06b7d1770a31b39cf2c14c291d0a8a8874aa011054e12cb27a09091afbf60727bb2bff481a97338dc487b839556416ed1480564d613aea6", 0xce}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}], 0x3, 0x20080000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000011c0)) r5 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000180)=""/17) 13:32:00 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0xf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 'client0\x00', 0x0, "82aa6f79b4c5fc7e", "60977325ddabb6a67e30ce0f2863844bcb113fd7bdc3084800a5261705dae07b"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)) 13:32:00 executing program 2: io_setup(0x5, &(0x7f00000005c0)=0x0) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 13:32:00 executing program 1: r0 = semget$private(0x0, 0x4, 0x220) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000040)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x5450, 0x0) memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x2) semget$private(0x0, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001180)=0xffffff77) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0)=""/75) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x5452, &(0x7f0000000180)={@rand_addr=' \x01\x00', @local, @loopback}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x29, 0x6, 0x9, 0x8, 0x1c, @mcast1, @loopback, 0x709, 0x7800, 0x3ee800, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x29, 0xff, 0x54, 0xccc, 0x49, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x1000, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="676176cc42158cd8052e42e7da8064c62b14d94ef38c5155c34ef21f971aecc0489c23c408b867f9993fc47afa260c0fc75f9e97289a3f530e9efdd2ab7fd6d84ddd053f72108a7e4648fc2fe17ea63ae26274bf177ad59c18230722f66588e62865527f33db9d5d1501b3c84b84d9dbfd666318670c26fd06e10fe78a253fec77756515b58475f78cd142c680f1e034027e4f723d97c3c0a46b902b215641003257f95f9608faaca52ce0e15782b697cec2de60b42114782b0c5171dd2d4b9622515d523391e1f0097ed57a653213773254c9", 0xd3}, {&(0x7f0000000540)="73ec1aa82ff8019e7fc4574fd5ed24a27880db07baae6d3b4ddcab44431f172084a07b54dbee444da37df43ff998b7ff50b74b7310b144a9dcea324f7805eedfd93d676f2570b6a993b8e808e4bb75106e097de8e83864cd3f7cf838f1052177376cf4b19088a75c2f3fc4604b2f7c29f185a85ee23a5a770e0ac018195ab6b43479c70cc20f3813d2a58fa067ab51ffbf103dc09007306d1989cc797075d3b03e725db4b809843d95a93259a3a21ca846f6d3fd8cfbfdd4801816bfb4216cc509b9113533cf467a4db7ac42a7e4d81018a1056f56fdc236f81cf33c52492e1127e049f94980", 0xe6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="0c0000000000000000000000080000003b7aa0f08e6600000000000000e7e4377b692746e45db206ba1f0c2dc6a89cb9162b186931cb4d7f4448bbfa8159758e073d1c72f5098bcf920ec379c42950f00efb1487f86008bbdc3ae392a9393af569000000000000000001040000000000000000001a6291102e45d6e0bf72ddb2d8d7888fee8adac86ce4a64271c69bdba9717ad4065112288550e7f59e88c1ccf5d19ab747e00e72719f7347", @ANYRES32=0x0, @ANYBLOB="6401014b793455e7757e99ad90650b1d2bd202ac1e01010000000014000000000000001c000000000000c190678b70d851296c00"/67, @ANYRES32=r4, @ANYRES64], 0x168}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="ecca82ac26acae925ee94e4d126bac333d67a4839953811ada3230e066637208fcfe24886f19bfb2dc6793f8216f0cb742365aee6642ff7c41b13bb62b27a1da3d5a2826aa49715ed65a649be7a65d605a461650a6bcfc6988c1fcce07b7e57e90440e75c9af7532f658ba6980fe259ae46417f444aaf9cc4e686281943d1923d9f8104d8836afd27ac8a6ac848ab601903856be551fa8e381a6ebeecec36a788bdb2aebfc6500fb72d3d664baf23bee", 0xb0}, {&(0x7f00000003c0)="4b5f23522128de4295aa57799b1b70a366fc69d2c68a0198983459d11e0d1a4406e16fc20194", 0x26}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="c5fff3ab9c38eaf3c0d461f6b54d3b6b6830c4889ddaa8fd01917b9f6842ee378f890dfb0e24288f1362ccc1660e835b4d0a943305356255ad68c31b01cc6fe29f5c76d573f94e", 0x47}, {&(0x7f0000000980)="69bad60399de30e3a2ee9b165a5e67bdda1d52685562563684bca86826eb906ddd82394e24c85b98959586fc1ce8e3c4ef8841079f4bad5f1fc8aba963c131c85d937684e70b9521a2071d3b20c359b2812d3286a0924f5bf37c0414a9225a1b64b4d84c7a90759f88264227280f982b7de6962c017f67db6c968a065d16c455a1375e6535352e122ead311accae89b862abaf1ec11e2abb6325ce033b68885c217cb328", 0xa4}, {&(0x7f0000000a40)="f30c6b77d3c45cb8a557e5609d411ea25a6830478df459351760d93a3a5a03fadf1379564005a7a8ae10c020c480a6548d902fd3857133e5d39662303f4e6a8a1e131dedb3b2587f65e50a122cdf79af7cdb6c00911c53986db50204da5e28ab1bac3789d6ca0913553b7c7d07c64ef43f90bf08fc99f1a5c7d485276c487a0ab12bb36c9532a898b71a8c15983872166e0441c9c463c06b7d1770a31b39cf2c14c291d0a8a8874aa011054e12cb27a09091afbf60727bb2bff481a97338dc487b839556416ed1480564d613aea6", 0xce}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}], 0x3, 0x20080000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000011c0)) r5 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000180)=""/17) 13:32:00 executing program 1: r0 = semget$private(0x0, 0x4, 0x220) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000040)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x5450, 0x0) memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x2) semget$private(0x0, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001180)=0xffffff77) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0)=""/75) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x5452, &(0x7f0000000180)={@rand_addr=' \x01\x00', @local, @loopback}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x29, 0x6, 0x9, 0x8, 0x1c, @mcast1, @loopback, 0x709, 0x7800, 0x3ee800, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x29, 0xff, 0x54, 0xccc, 0x49, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x1000, 0x8}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="676176cc42158cd8052e42e7da8064c62b14d94ef38c5155c34ef21f971aecc0489c23c408b867f9993fc47afa260c0fc75f9e97289a3f530e9efdd2ab7fd6d84ddd053f72108a7e4648fc2fe17ea63ae26274bf177ad59c18230722f66588e62865527f33db9d5d1501b3c84b84d9dbfd666318670c26fd06e10fe78a253fec77756515b58475f78cd142c680f1e034027e4f723d97c3c0a46b902b215641003257f95f9608faaca52ce0e15782b697cec2de60b42114782b0c5171dd2d4b9622515d523391e1f0097ed57a653213773254c9", 0xd3}, {&(0x7f0000000540)="73ec1aa82ff8019e7fc4574fd5ed24a27880db07baae6d3b4ddcab44431f172084a07b54dbee444da37df43ff998b7ff50b74b7310b144a9dcea324f7805eedfd93d676f2570b6a993b8e808e4bb75106e097de8e83864cd3f7cf838f1052177376cf4b19088a75c2f3fc4604b2f7c29f185a85ee23a5a770e0ac018195ab6b43479c70cc20f3813d2a58fa067ab51ffbf103dc09007306d1989cc797075d3b03e725db4b809843d95a93259a3a21ca846f6d3fd8cfbfdd4801816bfb4216cc509b9113533cf467a4db7ac42a7e4d81018a1056f56fdc236f81cf33c52492e1127e049f94980", 0xe6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="0c0000000000000000000000080000003b7aa0f08e6600000000000000e7e4377b692746e45db206ba1f0c2dc6a89cb9162b186931cb4d7f4448bbfa8159758e073d1c72f5098bcf920ec379c42950f00efb1487f86008bbdc3ae392a9393af569000000000000000001040000000000000000001a6291102e45d6e0bf72ddb2d8d7888fee8adac86ce4a64271c69bdba9717ad4065112288550e7f59e88c1ccf5d19ab747e00e72719f7347", @ANYRES32=0x0, @ANYBLOB="6401014b793455e7757e99ad90650b1d2bd202ac1e01010000000014000000000000001c000000000000c190678b70d851296c00"/67, @ANYRES32=r4, @ANYRES64], 0x168}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="ecca82ac26acae925ee94e4d126bac333d67a4839953811ada3230e066637208fcfe24886f19bfb2dc6793f8216f0cb742365aee6642ff7c41b13bb62b27a1da3d5a2826aa49715ed65a649be7a65d605a461650a6bcfc6988c1fcce07b7e57e90440e75c9af7532f658ba6980fe259ae46417f444aaf9cc4e686281943d1923d9f8104d8836afd27ac8a6ac848ab601903856be551fa8e381a6ebeecec36a788bdb2aebfc6500fb72d3d664baf23bee", 0xb0}, {&(0x7f00000003c0)="4b5f23522128de4295aa57799b1b70a366fc69d2c68a0198983459d11e0d1a4406e16fc20194", 0x26}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="c5fff3ab9c38eaf3c0d461f6b54d3b6b6830c4889ddaa8fd01917b9f6842ee378f890dfb0e24288f1362ccc1660e835b4d0a943305356255ad68c31b01cc6fe29f5c76d573f94e", 0x47}, {&(0x7f0000000980)="69bad60399de30e3a2ee9b165a5e67bdda1d52685562563684bca86826eb906ddd82394e24c85b98959586fc1ce8e3c4ef8841079f4bad5f1fc8aba963c131c85d937684e70b9521a2071d3b20c359b2812d3286a0924f5bf37c0414a9225a1b64b4d84c7a90759f88264227280f982b7de6962c017f67db6c968a065d16c455a1375e6535352e122ead311accae89b862abaf1ec11e2abb6325ce033b68885c217cb328", 0xa4}, {&(0x7f0000000a40)="f30c6b77d3c45cb8a557e5609d411ea25a6830478df459351760d93a3a5a03fadf1379564005a7a8ae10c020c480a6548d902fd3857133e5d39662303f4e6a8a1e131dedb3b2587f65e50a122cdf79af7cdb6c00911c53986db50204da5e28ab1bac3789d6ca0913553b7c7d07c64ef43f90bf08fc99f1a5c7d485276c487a0ab12bb36c9532a898b71a8c15983872166e0441c9c463c06b7d1770a31b39cf2c14c291d0a8a8874aa011054e12cb27a09091afbf60727bb2bff481a97338dc487b839556416ed1480564d613aea6", 0xce}], 0x3, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}], 0x3, 0x20080000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000011c0)) r5 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000180)=""/17) 13:32:00 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0x0) [ 978.025938][ T9921] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 978.033974][ T9921] ref_ctr decrement failed for inode: 0x3865 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b0e2a6c8 [ 978.047945][ T9921] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 978.055992][ T9921] ref_ctr decrement failed for inode: 0x3865 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b0e2a6c8 13:32:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:32:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) utimes(&(0x7f00000002c0)='./bus\x00', 0x0) 13:32:03 executing program 1: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) io_uring_enter(r1, 0x6b46, 0x0, 0x0, 0x0, 0x0) 13:32:03 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:32:03 executing program 2: unshare(0x2060400) r0 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000001c0)=0xfffffca0) 13:32:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)='o', 0x1}], 0x1, 0x0, 0x0, 0xf}, 0x34}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000740)}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000640)="cd1fc4b38ae48199d2eaec1b2e4bab0b6dfb8954b989235b6cf3a034ffa4b35b87fed4867d8de3b119153066a1ed40e8512daabc77862f314df7c70c9ad84caf5ca80b4b8d8554eaef12edd80eca497f7eddab6cbc04c14115816a1386dc9d4864335de5b751fecba7316e19b5e46012bc0a57caa83e89b6", 0x78}, {&(0x7f00000001c0)="32120382a51c79837eb9315b6658315292bd5b8cc6000dc7b8019ebcc2740fced630f6ae91da40b3c5ea04d699c4cfe1b0db9fb0116b4d9088b4c15d5d7ea56d151324dc45f49bcaeaaf064ac6ef08682fb83d508911701cb1c41efaa3a53ac2a49d162b5c2a1050a83230a005bf106919d2ed39256e46f70221f9faa3b24f67ba971135ec7f3ea2318fe97ffb6233eaa7f9d8a74f9557daa8a181e83a3d40002d28ab0c827e2b2782540276cc79d414000aa0d21d359068e2ee5561a45e82bfd15443c12dd0548add3b45256d30680f45aa6964e213e441eda72c5e4f1e877277a20fbda21ac18394", 0xe9}], 0x2, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @generic={0x0, 0x8, "7bbbc7928292"}, @lsrr={0x83, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @private, @empty, @private]}, @cipso={0x86, 0x30, 0x0, [{0x0, 0xa, "09f8e23f73d280b1"}, {0x0, 0x11, "3a60860e1c6f012e7172a6c1a013ee"}, {0x0, 0xf, "7cb861861ffe776e77b6b9f4ed"}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x3, "8c"}]}}}, @ip_tos_int={{0x14}}], 0xcd}}], 0x3, 0x60c5840) 13:32:03 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0xfb384c570e8c81b5}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 13:32:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x60}}, 0x0) 13:32:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001800)={0x2, [{r5, r7}, {r2, r7}, {r3, r7}, {r5, r7}, {r2, r7}, {r3, r7}, {r6, r4}, {r5, r7}, {r5, r7}, {r5}, {r3, r7}, {r6, r7}, {r5, r4}, {r3, r7}, {0x0, r4}, {r3, r4}, {r2, r7}, {0x0, r7}, {r3, r7}, {0x0, r7}, {r6, r7}, {r6, r4}, {r6, r7}, {}, {0x0, r7}, {0x0, r4}, {r5, r7}, {r2}, {r2, r7}, {0x0, r7}, {r2, r7}, {r6, r4}, {0x0, r4}, {r2, r4}, {r6}, {r3, r4}, {r6, r4}, {r2, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r2, r7}, {r3, r7}, {0x0, r7}, {}, {r6}, {r2, r4}, {r2}, {r2, r4}, {r3, r7}, {}, {0x0, r4}, {r5, r4}, {r5}, {r2, r4}, {0x0, r7}, {r3}, {0x0, r4}, {r3}, {0x0, r7}, {r2}, {0x0, r7}, {r6, r4}, {r6}, {0x0, r4}, {r3, r7}, {r3, r7}, {r6, r4}, {r3}, {r6, r7}, {r3, r7}, {r5}, {0x0, r7}, {r2, r4}, {r3}, {0x0, r7}, {r6, r4}, {r3, r4}, {r5}, {r3, r4}, {r6, r7}, {r5, r7}, {r2, r7}, {r2, r7}, {r2}, {r3, r4}, {r5, r4}, {r3, r7}, {r2, r4}, {r6}, {r2, r4}, {r2, r4}, {r6, r7}, {0x0, r7}, {r5, r7}, {r5, r4}, {0x0, r4}, {r3, r4}, {r6, r4}, {r6, r4}, {r3, r7}, {r5, r4}, {r5}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r7}, {r3, r4}, {r3, r7}, {r6, r7}, {r6, r4}, {}, {r6, r7}, {r3, r4}, {r2, r4}, {r5}, {r6, r4}, {r5, r4}, {r5, r4}, {0x0, r4}, {0x0, r7}, {r3, r7}, {r6, r7}, {r5, r4}, {r5, r7}, {r5, r7}, {0x0, r7}, {r3, r7}, {r5}, {0x0, r7}, {r6, r4}, {r2, r7}, {r5, r4}, {r5, r7}, {0x0, r4}, {r3, r4}, {r6, r7}, {r5, r4}, {r3, r4}, {r6, r4}, {r2, r7}, {0x0, r7}, {r2, r7}, {r2, r7}, {r2, r4}, {r2, r7}, {r3, r7}, {r3, r7}, {r5, r7}, {r6, r4}, {r2, r4}, {r6, r7}, {r3, r7}, {0x0, r7}, {r2, r4}, {r6}, {r6, r4}, {r5, r4}, {r3, r4}, {}, {r5}, {r2, r4}, {}, {r5, r7}, {r2, r7}, {r3, r4}, {r5, r7}, {0x0, r4}, {r3}, {r2, r7}, {r3, r7}, {r5, r7}, {r5}, {r3, r7}, {r5, r7}, {r6, r7}, {r2, r7}, {r6, r7}, {r3, r7}, {r3, r7}, {r5, r4}, {r5, r7}, {r2, r4}, {r2, r7}, {r2}, {r5, r4}, {0x0, r7}, {0x0, r7}, {r5}, {r5}, {r6, r7}, {r6, r4}, {r2, r4}, {r5, r4}, {r6, r4}, {r6, r7}, {r6, r7}, {0x0, r4}, {r2, r4}, {r5, r7}, {0x0, r4}, {r2, r7}, {r3, r4}, {r2, r7}, {r2, r4}, {r6, r7}, {r2, r4}, {r5, r4}, {r5, r7}, {0x0, r4}, {r2}, {0x0, r7}, {r2, r7}, {r5}, {r5, r7}, {r2, r4}, {r5, r7}, {r6, r7}, {r2}, {r3, r7}, {r3, r7}, {r2, r7}, {r3, r4}, {r5, r7}, {r2, r7}, {r2, r7}, {r5, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {0x0, r7}, {r3}, {r6}, {r2, r7}, {r6, r7}, {r5, r4}, {r6, r4}, {r5, r4}, {r5, r4}, {r3, r4}, {r5, r7}, {r5, r4}, {r2, r7}, {r3, r4}, {}, {0x0, r7}, {r2}, {r5, r7}, {r2}, {r6, r7}, {r3, r7}, {r6, r4}, {r5}, {r6, r4}], 0xff, "fa8ef3a2f78b20"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {}, {r3}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r2}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {r5}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {r2, r4}, {r6}, {}, {r2}, {r2}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r3}, {0x0, r9}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r2}, {r3, r4}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r8}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {}, {r2, r4}, {}, {r3}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050c00)) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x400200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 13:32:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1c, &(0x7f0000000480)={{{@in=@local}}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe8) 13:32:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) utimes(&(0x7f00000002c0)='./bus\x00', 0x0) 13:32:03 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10}, {0x10, 0x1, 0x2}], 0x20}, 0x0) [ 981.159148][ C0] sd 0:0:1:0: tag#291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 981.168894][ C0] sd 0:0:1:0: tag#291 CDB: opcode=0xe5 (vendor) [ 981.175427][ C0] sd 0:0:1:0: tag#291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 981.184484][ C0] sd 0:0:1:0: tag#291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 981.193438][ C0] sd 0:0:1:0: tag#291 CDB[20]: ba 13:32:06 executing program 5: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 13:32:06 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x2}, [], {}, [], {}, {0x8}}, 0x24, 0x0) 13:32:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) utimes(&(0x7f00000002c0)='./bus\x00', 0x0) 13:32:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125d, 0xffffffffffffffff) 13:32:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x4c, 0x2c, 0xd81}, 0x4c}}, 0x0) 13:32:06 executing program 0: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 13:32:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x1, &(0x7f0000000040)) 13:32:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) 13:32:06 executing program 2: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:06 executing program 4: prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) mlockall(0x1) 13:32:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x1000, 0x8}) 13:32:06 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) [ 984.081330][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:32:06 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x70) 13:32:06 executing program 2: r0 = syz_io_uring_complete(0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x80000000, 0x648fc29, 0xffffffe0, 0x6, 0x5}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="e87a07dfbf59377bdcc806d7bf01da7d6846c7c48e6d05fdf603cdf4fbc510550086043f43548f744eadf26dbf0477e5a9d86d178875216cd3883cc82099bb70a254bbb326d54b34dc52d6dff0d83b9ad2c78fc60dbde30e320fa7c88ec732a14e4b9c5064fb650345ef497745a229eafed20d837b294431652b6216d599b0c76f10b37c716fe8190cf1f600e4af73a02303c522c763c606db559281316465569cd3a0f03a31c067db1da21c1e3d39a0fe2c1cb99a7151d05538acc1401315f7828a42ddad1e61b766369593b477ad46337072d08c2c44e1a010f6129364", 0xde}, {&(0x7f00000000c0)="8054150a53517e7151cb6019c80ebe809220b361f3975b39e5f3f8989e36d99b8a8519238bd637b9fa1c81ec44e10fbfb8424059b768c1c4fdd1ea4d4e86c1cd2061e6c2560103beac515a32c036f21714", 0x51}, {&(0x7f00000002c0)="c3682cb40b2ef4b6b084d6316a7f9450798be09ca72af1c90888ece6057516ec4e91189dd48f7bc4a14d7d9aeef9f3d8d903b327db1697b7abc12bdabd3a5880a3ae381ef20e38f44f3e5d03ebab7fa2367703883a8d0243e7f1f1b7190d02e31f7b0668ded040d1f111a1b886bf61375457d6106f9ccedd565445525e86b7594ec24f30c2d6d7b59e5a37bf76350fc8cb8741cef3576ad88ad0ddefe6c2", 0x9e}, {&(0x7f0000000140)="d299e59541b79a", 0x7}], 0x4, 0x3, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[], 0xffffffe3) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x9}) fallocate(r0, 0x7d, 0x8, 0xffffffffffffff01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fadvise64(r2, 0x0, 0x0, 0x2) r3 = syz_io_uring_complete(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 13:32:06 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) 13:32:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x1000, 0x8}) 13:32:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="5a1400001a0025f00485bc04fef7681d020b49ff708800008003280008020100ac041410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 13:32:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) 13:32:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x1000, 0x8}) 13:32:06 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x3ac) [ 984.222735][T10025] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 984.230947][T10025] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 984.239097][T10025] netlink: 4602 bytes leftover after parsing attributes in process `syz-executor.0'. 13:32:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x1000, 0x8}) [ 984.291659][T10032] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 984.299785][T10032] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 984.307842][T10032] netlink: 4602 bytes leftover after parsing attributes in process `syz-executor.0'. 13:32:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ad00dead3394b3df4c6699"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x55e}], 0x1, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0xa, &(0x7f00000002c0)) 13:32:07 executing program 4: prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) mlockall(0x1) 13:32:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 13:32:07 executing program 0: syz_mount_image$iso9660(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000001700), 0x0, &(0x7f0000001740)={[], [{@uid_eq}]}) 13:32:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='shortname=winnt']) 13:32:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0xe21}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="719e8bb83bf765ed7de4c0"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 13:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x209fc, 0x8442) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}}) 13:32:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9b8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) 13:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x209fc, 0x8442) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}}) 13:32:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) 13:32:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 13:32:07 executing program 1: syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10012, r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r3, 0x541c, &(0x7f0000000000)) 13:32:07 executing program 4: prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) mlockall(0x1) 13:32:07 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x145, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000300), 0x20000000, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x209fc, 0x8442) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}}) 13:32:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) 13:32:07 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 13:32:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9b8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) 13:32:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@updsa={0x138, 0x1a, 0xc01, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 13:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x209fc, 0x8442) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}}) 13:32:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) 13:32:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x40004080, &(0x7f00000000c0), 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r1 = fork() tkill(r1, 0x3a) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x3f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) 13:32:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) write$binfmt_misc(r1, 0x0, 0x4) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) close(r1) 13:32:08 executing program 4: prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) mlockall(0x1) 13:32:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) 13:32:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9b8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) 13:32:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x3f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) 13:32:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) exit_group(0x0) 13:32:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc5, &(0x7f00000002c0)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = gettid() tkill(r2, 0x3a) 13:32:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x3f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) 13:32:08 executing program 3: r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0xfffffffffffffef5, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 13:32:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1, 0x80000001, 0x0) 13:32:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) select(0x40, &(0x7f0000000480)={0x5}, 0x0, &(0x7f0000000580)={0x9}, 0x0) 13:32:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9b8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) 13:32:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)='h', 0x1}, {&(0x7f0000000140)="06", 0x1}, {0x0}, {&(0x7f0000000300)="ed", 0x7fffefff}], 0x4) writev(r0, 0x0, 0x0) 13:32:10 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/42, 0x2a) getdents64(r0, &(0x7f0000000080)=""/195, 0xc3) 13:32:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x3f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) 13:32:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000180), 0xfffffff1) timer_create(0x2, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 13:32:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x28, r1, 0x801, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x28}}, 0x0) 13:32:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbf, &(0x7f00000002c0)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:32:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x45, 0x0, 0xff}, {}]}) 13:32:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 13:32:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x45, 0x0, 0xff}, {}]}) 13:32:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1001}, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)='@', 0x1}], 0x1) 13:32:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 13:32:11 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/4084, 0xfffffffffffffdc8) 13:32:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private2, 0x800, 0x2}, 0x20) 13:32:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x45, 0x0, 0xff}, {}]}) 13:32:11 executing program 2: unshare(0xc020600) r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 13:32:14 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0x0, 0x0) 13:32:14 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x28, &(0x7f00000002c0)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x3a) 13:32:14 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) 13:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="74fb6749a64b14d543"}]}]}, 0x24}], 0x1}, 0x0) 13:32:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000240)=r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000240)=r3) 13:32:14 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:32:14 executing program 1: r0 = syz_io_uring_setup(0x2466, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 13:32:14 executing program 4: setreuid(0xee00, 0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8927, &(0x7f0000000780)) [ 991.346708][ T22] audit: type=1326 audit(1632231134.035:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:32:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r2, &(0x7f0000000240)='/', 0x1) sendfile(r2, r2, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0), 0x4) recvmmsg(r1, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/119, 0x77}}], 0x1, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000180)='S', 0x1, 0x0, 0x0, 0x0) 13:32:14 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x10000000, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, 0x0) 13:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xde1, 0x0, "007eb23ac8e69973b806ffff638200e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "000800230000000010ff72edc3cf120000ffff"}) 13:32:14 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000040), 0x18) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xff0f0000}) [ 991.415862][ T22] audit: type=1326 audit(1632231134.055:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:32:14 executing program 2: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0ff7f) 13:32:14 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_test', 0xc0280, 0x0) 13:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xde1, 0x0, "007eb23ac8e69973b806ffff638200e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "000800230000000010ff72edc3cf120000ffff"}) 13:32:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) write(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) 13:32:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '15', ':', '12', ':', '19', '.', '1f'}}, 0x20000097) 13:32:14 executing program 1: pipe2(&(0x7f0000002b40)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0x2, 0xe) [ 991.518202][ T22] audit: type=1326 audit(1632231134.055:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:32:14 executing program 2: capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x81}) 13:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xde1, 0x0, "007eb23ac8e69973b806ffff638200e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "000800230000000010ff72edc3cf120000ffff"}) [ 991.624301][ T22] audit: type=1326 audit(1632231134.055:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:32:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '15', ':', '12', ':', '19', '.', '1f'}}, 0x20000097) 13:32:14 executing program 2: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000580)=0x1, 0x1ff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x3) 13:32:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000840)) 13:32:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 13:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xde1, 0x0, "007eb23ac8e69973b806ffff638200e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "000800230000000010ff72edc3cf120000ffff"}) 13:32:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {0x0, r3}, {r2}, {r2}, {}, {}, {}, {}, {}, {r2, r3}, {0x0, r3}, {}, {r1, r3}, {0x0, r3}, {}, {r2, r3}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r2}, {0x0, r3}, {}, {r1, r3}, {0x0, r3}, {r1}, {}, {r2}, {r1}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r2}, {}, {}, {0x0, r3}, {r2}, {r1}, {r1}, {r1}, {0x0, r3}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r2}, {}, {}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {r1, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1, r3}, {}, {r2, r3}, {r1}, {r2}, {}, {r1}, {}, {0x0, r3}, {}, {r1}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {r2, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2, r3}, {r2}, {}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {r2}, {r1}, {}, {}, {}, {0x0, r3}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r1}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1}, {}, {r1}, {0x0, r3}, {r2}, {r1, r3}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {r1}, {}, {r1}, {}, {}, {r2}, {0x0, r3}, {r2, r3}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {r2}, {r2, r3}, {}, {}, {r1}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {r1}, {r2}, {r2}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {r1}, {}, {}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {r2, r3}, {r1}, {r2, r3}, {r2}, {r1, r3}, {}, {}, {}, {r1}, {}, {}, {}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "2156816c73038c"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="23365c8d4ff7a1bae8b648e992dd2b3fffead46bd9e4544e", 0x18, 0x3f) preadv(r4, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/19, 0x13}], 0x1, 0x1, 0xff) fallocate(r0, 0x14, 0x0, 0x3) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) fallocate(r5, 0x8, 0x1, 0x9) [ 991.659008][ T22] audit: type=1326 audit(1632231134.065:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62343739 code=0x7ffc0000 13:32:14 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x406, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001540)) 13:32:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '15', ':', '12', ':', '19', '.', '1f'}}, 0x20000097) 13:32:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffac}) 13:32:14 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e80)={0x1c, r0, 0x7fd694e029e51ef3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x7, 0x2}]}, 0x1c}}, 0x0) 13:32:14 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x43000000}}]}) 13:32:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x0) 13:32:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '15', ':', '12', ':', '19', '.', '1f'}}, 0x20000097) [ 991.787552][ C0] sd 0:0:1:0: tag#303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 991.797338][ C0] sd 0:0:1:0: tag#303 CDB: opcode=0xe5 (vendor) [ 991.803623][ C0] sd 0:0:1:0: tag#303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 991.812593][ C0] sd 0:0:1:0: tag#303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 991.821554][ C0] sd 0:0:1:0: tag#303 CDB[20]: ba 13:32:14 executing program 5: r0 = open(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = creat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000001) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) munmap(&(0x7f0000553000/0x1000)=nil, 0x1000) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000007140)='.log\x00', 0x200000, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000007280)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)="276e6e1a6d8a12c53945c256a0800b15f9a4a6e24ab63ea79b177145e680e2e49daca090bc1896f21e37875175ce29a9be52d5429fad03a1b1965f76e77bee39a081a86804ea87743f416e87c420710cdb5a383af786c8c7cb4e25fe66e1f9c9451d6ac1c984577e26a2e97b32d1ee5b6ab4c2e3c12c4e445459e6c27e10ab6621d78046516948ad7e8cd89c4ff3c5e35d8be2", 0x93}, {&(0x7f0000000180)="477e2fddd7f2ed39b2c829f8dba24ec15c4e1e", 0x13}], 0x2, &(0x7f0000007180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0xd8, 0x800}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r6 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r6, &(0x7f0000000080), 0xfffffe5e) fdatasync(r6) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) [ 991.851529][T10309] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.948459][T10316] EXT4-fs (sda1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 991.973587][T10325] EXT4-fs (sda1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 13:32:14 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e677d114b654b49938ca8db38f8c44f7b7d9c40000000ffffffe687cfac79b04c2e1fea4b7a3dfc8ea6a7efefe4d21810262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e787780178155460d3043c1639b7f800066cee12ee3cc", 0x79}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:32:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000840)) 13:32:14 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="5500000018007f21c0fe15b282a380930a60000248a84302916d0200390009003500ff6c020000001500050048010000070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 13:32:14 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) 13:32:14 executing program 4: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) [ 992.066812][ C1] sd 0:0:1:0: tag#312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 992.076595][ C1] sd 0:0:1:0: tag#312 CDB: opcode=0xe5 (vendor) [ 992.082924][ C1] sd 0:0:1:0: tag#312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 992.091889][ C1] sd 0:0:1:0: tag#312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 992.100902][ C1] sd 0:0:1:0: tag#312 CDB[20]: ba 13:32:14 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="5500000018007f21c0fe15b282a380930a60000248a84302916d0200390009003500ff6c020000001500050048010000070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 13:32:14 executing program 2: r0 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:17 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="5500000018007f21c0fe15b282a380930a60000248a84302916d0200390009003500ff6c020000001500050048010000070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 13:32:17 executing program 2: clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) set_mempolicy(0x4003, &(0x7f0000000380)=0x3, 0xfd) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)="be9ff483111ec7c05a6e35766a9c5cd98ed812fee8ee677c468e2d01bb01fd560342c1891c9b259ef048c5ac173518e9cd261fa6cbe6a89b00bbcac9c7a8fc13d6d5661f30c63f72be485d2065e695187bb1482dff9c9d341184640629dc64bb37212a404898297b90eb535ba521052c06a3f59c8a96155e941ed41bc723c4062d6dc6418cd0808ff3") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000140)={&(0x7f0000001780)=""/220, 0xdc}) 13:32:17 executing program 5: syz_mount_image$ext4(&(0x7f0000001a00)='ext3\x00', &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, &(0x7f0000002fc0), 0x0, &(0x7f00000030c0)={[{@discard}, {@delalloc}, {@norecovery}]}) 13:32:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup2(r1, r1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0xfffffffc, 0x0, 0x0, 0x9, 0x0, "80644372bbd72f3d49209dec18a959adcc7253"}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x64) 13:32:17 executing program 4: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:17 executing program 0: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @uid=r1}]}]}, 0x1c}], 0x1}, 0x0) 13:32:17 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3b, 0x8000100002ada}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="23dfd442551264c8ee5a07667bd987e8eba6d12e0b9bf17d5cc47dfe17d429dc117a96e143ed1b5fd4a716aee2ee45095d1f7efdf98d67da1044b299545679e7ec7034d7eeddd4202434becfe698a9490680b77661f48a1e38d673116dd9fa", 0x5f}, {&(0x7f0000000340)="fad37818548ada8a7fd3dd03bc6ab67968ce128c26c4bf539ffc72c9e77069cdd30b80dd9008eb", 0x27}, {&(0x7f0000000400)="ace821bcb0976f87d6895ea49d80e35add2ebc6a1eea8a6483e10a2b375ad1f8dcbf797be6baf2d83aa8d8508ff607e18dc15e2b8b5f069686b99e7a01bd3af58c3bd66ca94f2cdf908d5f964014e4f325457a72c6db48f3dc572da69356ac1f855de71729f87dca7a6a5307af33f780118b4817be1259074f96d1311db7f04f2738f1691b82d19094fb4e77210bc11413de3a623a1dc09475c4a378c3dac4d9745fb8e87d29c41f7f7ce0546261b6f27f20618a2160ea6a3edb1a9b2399dc48ab988a5fe288d12de0f9a0c46c0d227c", 0xd0}, {&(0x7f0000000500)="00842bf020d55b513ccc889b21794028d44acc4652a1defd2e8739b4167c6ed22a381d14b697edbfdef884ba0ec93a3de51cc99bd137247a287ea067327b5d39cef6df1f373b15249c99518a402a4300651f665841a57622dfc3da37fc006f1a7bfa8d8f5db161933966255e6db9f24bd75ec1e1629de36074a39fe1c06a8bc044ba4399746cba93321c655bf1601899e5131b9d05094392526b5d335a95e03d46f0945bea96621263", 0xa9}, {&(0x7f00000005c0)="fcf00e7e069b76c78ae460d9e2a102bf9b228f747760c8202c86d5934b7bbaaf3981ce545f0ce27a49e39acb467b189de2dec61bd293e95fb302856469bee59aff51a45557bda05b319c7da7e00019c0", 0x50}, {&(0x7f0000000640)="f7ae3eb6cb274044c18e1f74749d56391294a75659fcbbc6d8ad004a86b2f6a31d3a4ee1ae8940bd3dd1d69ee79704c177304ab71a0e44ffc7d022ab1d0f644221295551a189ae0c449f5c3c704dcb24a6404fae55812bc5335c730c62f8192535f88c1a39d05afa01fd", 0x6a}, {&(0x7f00000006c0)="1500bddad0f4625ca1ead726528d0522d136a163b5a532cd623f2eec4c32c86f8ea88c4771dc2aca6ffeca5f30b2ffbf381f1d83b8cf9e8021e7146ecaad3c560f190e5c2300e26d95926eb3a159c4d8ddbd4f390965a10c4e4382dbdba0dcf74cd7f9fb1dc78da7b1bae56cd35f5fadd57efb401b3b55d656a111415e9d2838233fc5dd45cb10b3da1e558c149cb666ac8b99bb136917a8abc86daec497f168e7e0aed31330104660228ebc", 0xac}, {&(0x7f0000000780)="877c909b4cb267eacfc05f3e9c88c523fa12ae8b9b6413012d0620119f328c9067b8664b9990342159e95f9beb6afef4c9a7efa203b2277f81824fd0b1ac7fb9217774252b6c3fce2bdc7c0200e50e2edb3842f980c4d36cdbaf572888361e592a83d3e712ee0919f38faab51ed64814ec0b7387807f40", 0x77}, {&(0x7f0000000380)="66f8813d40ea7b1f82a31f28df259809f332a4e539577f348956b1903f1ff726a819", 0x22}], 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0x46e3, 0x5f3, 0x6b7897ab, 0x85ab, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x8000, 0x0, 0x0, 0x1, 0x0, "522035de5fdc1c30dd8c1fb8754ef7c044d5c8", 0x0, 0x7}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x8) pipe2(0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x10, r2, 0x0) r3 = msgget(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 13:32:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x34, r1, 0x9, 0x0, 0x0, {0x14}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) 13:32:17 executing program 2: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x5) 13:32:17 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="c7c2e2952bd1fe21b077e9d182a4e6d76d9003608c6aa8889aeb662a95c91e612a977cfcf3ca2635d004575e14a1ff8e02351ac9c104bcb02e8e04416b165598faff451608f5de9d18ff6571e33412a308936809ebeba3107db609a05d1ec2e4f6645ae41bc08b", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:32:18 executing program 1: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:18 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14a, &(0x7f00000001c0)="8d31e1d55b6939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24a1d9273bc98f78631776333afd16d66c13830c1beaa1b950e000000000000ab69347b9a915308c482353c485f8bb2965cd7e1292aaa6375f12e59f92cba4a37c9686d403d3a82d09ecbe57d3c3ec2117496b2dd4837334f2de9a39640516defd1e86cdf7a3585dea46ced4a31aaeddba0fa19737336aa9a0edba44df0b8138ed7f91262b41da05a13cd0bdb0d9ababc3074e95d7298a63d1be6978b3cb28d1eafc9615c7a9fb113bd94e0825e7850f5d86a23757ac244d58d632599ea5929fe74774d989ea9d90e9ee65d489860e678532bfa9deb3078094f165f2800b2e237639a4c2ef5fb36f7763e95066727bc95a9beeb326008c56b13fd52f09b7b160f994b94db76b612886c59c05415b83801b9dada2e8cb08cc22228499af014"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x34) 13:32:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3b, 0x8000100002ada}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="23dfd442551264c8ee5a07667bd987e8eba6d12e0b9bf17d5cc47dfe17d429dc117a96e143ed1b5fd4a716aee2ee45095d1f7efdf98d67da1044b299545679e7ec7034d7eeddd4202434becfe698a9490680b77661f48a1e38d673116dd9fa", 0x5f}, {&(0x7f0000000340)="fad37818548ada8a7fd3dd03bc6ab67968ce128c26c4bf539ffc72c9e77069cdd30b80dd9008eb", 0x27}, {&(0x7f0000000400)="ace821bcb0976f87d6895ea49d80e35add2ebc6a1eea8a6483e10a2b375ad1f8dcbf797be6baf2d83aa8d8508ff607e18dc15e2b8b5f069686b99e7a01bd3af58c3bd66ca94f2cdf908d5f964014e4f325457a72c6db48f3dc572da69356ac1f855de71729f87dca7a6a5307af33f780118b4817be1259074f96d1311db7f04f2738f1691b82d19094fb4e77210bc11413de3a623a1dc09475c4a378c3dac4d9745fb8e87d29c41f7f7ce0546261b6f27f20618a2160ea6a3edb1a9b2399dc48ab988a5fe288d12de0f9a0c46c0d227c", 0xd0}, {&(0x7f0000000500)="00842bf020d55b513ccc889b21794028d44acc4652a1defd2e8739b4167c6ed22a381d14b697edbfdef884ba0ec93a3de51cc99bd137247a287ea067327b5d39cef6df1f373b15249c99518a402a4300651f665841a57622dfc3da37fc006f1a7bfa8d8f5db161933966255e6db9f24bd75ec1e1629de36074a39fe1c06a8bc044ba4399746cba93321c655bf1601899e5131b9d05094392526b5d335a95e03d46f0945bea96621263", 0xa9}, {&(0x7f00000005c0)="fcf00e7e069b76c78ae460d9e2a102bf9b228f747760c8202c86d5934b7bbaaf3981ce545f0ce27a49e39acb467b189de2dec61bd293e95fb302856469bee59aff51a45557bda05b319c7da7e00019c0", 0x50}, {&(0x7f0000000640)="f7ae3eb6cb274044c18e1f74749d56391294a75659fcbbc6d8ad004a86b2f6a31d3a4ee1ae8940bd3dd1d69ee79704c177304ab71a0e44ffc7d022ab1d0f644221295551a189ae0c449f5c3c704dcb24a6404fae55812bc5335c730c62f8192535f88c1a39d05afa01fd", 0x6a}, {&(0x7f00000006c0)="1500bddad0f4625ca1ead726528d0522d136a163b5a532cd623f2eec4c32c86f8ea88c4771dc2aca6ffeca5f30b2ffbf381f1d83b8cf9e8021e7146ecaad3c560f190e5c2300e26d95926eb3a159c4d8ddbd4f390965a10c4e4382dbdba0dcf74cd7f9fb1dc78da7b1bae56cd35f5fadd57efb401b3b55d656a111415e9d2838233fc5dd45cb10b3da1e558c149cb666ac8b99bb136917a8abc86daec497f168e7e0aed31330104660228ebc", 0xac}, {&(0x7f0000000780)="877c909b4cb267eacfc05f3e9c88c523fa12ae8b9b6413012d0620119f328c9067b8664b9990342159e95f9beb6afef4c9a7efa203b2277f81824fd0b1ac7fb9217774252b6c3fce2bdc7c0200e50e2edb3842f980c4d36cdbaf572888361e592a83d3e712ee0919f38faab51ed64814ec0b7387807f40", 0x77}, {&(0x7f0000000380)="66f8813d40ea7b1f82a31f28df259809f332a4e539577f348956b1903f1ff726a819", 0x22}], 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0x46e3, 0x5f3, 0x6b7897ab, 0x85ab, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x8000, 0x0, 0x0, 0x1, 0x0, "522035de5fdc1c30dd8c1fb8754ef7c044d5c8", 0x0, 0x7}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x8) pipe2(0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x10, r2, 0x0) r3 = msgget(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 13:32:18 executing program 4: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:18 executing program 0: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3b, 0x8000100002ada}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="23dfd442551264c8ee5a07667bd987e8eba6d12e0b9bf17d5cc47dfe17d429dc117a96e143ed1b5fd4a716aee2ee45095d1f7efdf98d67da1044b299545679e7ec7034d7eeddd4202434becfe698a9490680b77661f48a1e38d673116dd9fa", 0x5f}, {&(0x7f0000000340)="fad37818548ada8a7fd3dd03bc6ab67968ce128c26c4bf539ffc72c9e77069cdd30b80dd9008eb", 0x27}, {&(0x7f0000000400)="ace821bcb0976f87d6895ea49d80e35add2ebc6a1eea8a6483e10a2b375ad1f8dcbf797be6baf2d83aa8d8508ff607e18dc15e2b8b5f069686b99e7a01bd3af58c3bd66ca94f2cdf908d5f964014e4f325457a72c6db48f3dc572da69356ac1f855de71729f87dca7a6a5307af33f780118b4817be1259074f96d1311db7f04f2738f1691b82d19094fb4e77210bc11413de3a623a1dc09475c4a378c3dac4d9745fb8e87d29c41f7f7ce0546261b6f27f20618a2160ea6a3edb1a9b2399dc48ab988a5fe288d12de0f9a0c46c0d227c", 0xd0}, {&(0x7f0000000500)="00842bf020d55b513ccc889b21794028d44acc4652a1defd2e8739b4167c6ed22a381d14b697edbfdef884ba0ec93a3de51cc99bd137247a287ea067327b5d39cef6df1f373b15249c99518a402a4300651f665841a57622dfc3da37fc006f1a7bfa8d8f5db161933966255e6db9f24bd75ec1e1629de36074a39fe1c06a8bc044ba4399746cba93321c655bf1601899e5131b9d05094392526b5d335a95e03d46f0945bea96621263", 0xa9}, {&(0x7f00000005c0)="fcf00e7e069b76c78ae460d9e2a102bf9b228f747760c8202c86d5934b7bbaaf3981ce545f0ce27a49e39acb467b189de2dec61bd293e95fb302856469bee59aff51a45557bda05b319c7da7e00019c0", 0x50}, {&(0x7f0000000640)="f7ae3eb6cb274044c18e1f74749d56391294a75659fcbbc6d8ad004a86b2f6a31d3a4ee1ae8940bd3dd1d69ee79704c177304ab71a0e44ffc7d022ab1d0f644221295551a189ae0c449f5c3c704dcb24a6404fae55812bc5335c730c62f8192535f88c1a39d05afa01fd", 0x6a}, {&(0x7f00000006c0)="1500bddad0f4625ca1ead726528d0522d136a163b5a532cd623f2eec4c32c86f8ea88c4771dc2aca6ffeca5f30b2ffbf381f1d83b8cf9e8021e7146ecaad3c560f190e5c2300e26d95926eb3a159c4d8ddbd4f390965a10c4e4382dbdba0dcf74cd7f9fb1dc78da7b1bae56cd35f5fadd57efb401b3b55d656a111415e9d2838233fc5dd45cb10b3da1e558c149cb666ac8b99bb136917a8abc86daec497f168e7e0aed31330104660228ebc", 0xac}, {&(0x7f0000000780)="877c909b4cb267eacfc05f3e9c88c523fa12ae8b9b6413012d0620119f328c9067b8664b9990342159e95f9beb6afef4c9a7efa203b2277f81824fd0b1ac7fb9217774252b6c3fce2bdc7c0200e50e2edb3842f980c4d36cdbaf572888361e592a83d3e712ee0919f38faab51ed64814ec0b7387807f40", 0x77}, {&(0x7f0000000380)="66f8813d40ea7b1f82a31f28df259809f332a4e539577f348956b1903f1ff726a819", 0x22}], 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0x46e3, 0x5f3, 0x6b7897ab, 0x85ab, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x8000, 0x0, 0x0, 0x1, 0x0, "522035de5fdc1c30dd8c1fb8754ef7c044d5c8", 0x0, 0x7}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x8) pipe2(0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x10, r2, 0x0) r3 = msgget(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 13:32:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3b, 0x8000100002ada}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="23dfd442551264c8ee5a07667bd987e8eba6d12e0b9bf17d5cc47dfe17d429dc117a96e143ed1b5fd4a716aee2ee45095d1f7efdf98d67da1044b299545679e7ec7034d7eeddd4202434becfe698a9490680b77661f48a1e38d673116dd9fa", 0x5f}, {&(0x7f0000000340)="fad37818548ada8a7fd3dd03bc6ab67968ce128c26c4bf539ffc72c9e77069cdd30b80dd9008eb", 0x27}, {&(0x7f0000000400)="ace821bcb0976f87d6895ea49d80e35add2ebc6a1eea8a6483e10a2b375ad1f8dcbf797be6baf2d83aa8d8508ff607e18dc15e2b8b5f069686b99e7a01bd3af58c3bd66ca94f2cdf908d5f964014e4f325457a72c6db48f3dc572da69356ac1f855de71729f87dca7a6a5307af33f780118b4817be1259074f96d1311db7f04f2738f1691b82d19094fb4e77210bc11413de3a623a1dc09475c4a378c3dac4d9745fb8e87d29c41f7f7ce0546261b6f27f20618a2160ea6a3edb1a9b2399dc48ab988a5fe288d12de0f9a0c46c0d227c", 0xd0}, {&(0x7f0000000500)="00842bf020d55b513ccc889b21794028d44acc4652a1defd2e8739b4167c6ed22a381d14b697edbfdef884ba0ec93a3de51cc99bd137247a287ea067327b5d39cef6df1f373b15249c99518a402a4300651f665841a57622dfc3da37fc006f1a7bfa8d8f5db161933966255e6db9f24bd75ec1e1629de36074a39fe1c06a8bc044ba4399746cba93321c655bf1601899e5131b9d05094392526b5d335a95e03d46f0945bea96621263", 0xa9}, {&(0x7f00000005c0)="fcf00e7e069b76c78ae460d9e2a102bf9b228f747760c8202c86d5934b7bbaaf3981ce545f0ce27a49e39acb467b189de2dec61bd293e95fb302856469bee59aff51a45557bda05b319c7da7e00019c0", 0x50}, {&(0x7f0000000640)="f7ae3eb6cb274044c18e1f74749d56391294a75659fcbbc6d8ad004a86b2f6a31d3a4ee1ae8940bd3dd1d69ee79704c177304ab71a0e44ffc7d022ab1d0f644221295551a189ae0c449f5c3c704dcb24a6404fae55812bc5335c730c62f8192535f88c1a39d05afa01fd", 0x6a}, {&(0x7f00000006c0)="1500bddad0f4625ca1ead726528d0522d136a163b5a532cd623f2eec4c32c86f8ea88c4771dc2aca6ffeca5f30b2ffbf381f1d83b8cf9e8021e7146ecaad3c560f190e5c2300e26d95926eb3a159c4d8ddbd4f390965a10c4e4382dbdba0dcf74cd7f9fb1dc78da7b1bae56cd35f5fadd57efb401b3b55d656a111415e9d2838233fc5dd45cb10b3da1e558c149cb666ac8b99bb136917a8abc86daec497f168e7e0aed31330104660228ebc", 0xac}, {&(0x7f0000000780)="877c909b4cb267eacfc05f3e9c88c523fa12ae8b9b6413012d0620119f328c9067b8664b9990342159e95f9beb6afef4c9a7efa203b2277f81824fd0b1ac7fb9217774252b6c3fce2bdc7c0200e50e2edb3842f980c4d36cdbaf572888361e592a83d3e712ee0919f38faab51ed64814ec0b7387807f40", 0x77}, {&(0x7f0000000380)="66f8813d40ea7b1f82a31f28df259809f332a4e539577f348956b1903f1ff726a819", 0x22}], 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0x46e3, 0x5f3, 0x6b7897ab, 0x85ab, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x8000, 0x0, 0x0, 0x1, 0x0, "522035de5fdc1c30dd8c1fb8754ef7c044d5c8", 0x0, 0x7}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x8) pipe2(0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x10, r2, 0x0) r3 = msgget(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 13:32:18 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 13:32:18 executing program 5: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x10, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x80, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x1}}) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x7ff, 0x0) 13:32:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01002f, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {0x0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000000040)) 13:32:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0xc020660b, 0x0) [ 996.188522][ C1] sd 0:0:1:0: tag#281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 996.198282][ C1] sd 0:0:1:0: tag#281 CDB: opcode=0xe5 (vendor) [ 996.204529][ C1] sd 0:0:1:0: tag#281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 996.213479][ C1] sd 0:0:1:0: tag#281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 996.222436][ C1] sd 0:0:1:0: tag#281 CDB[20]: ba [ 996.290969][ C1] sd 0:0:1:0: tag#282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 996.300748][ C1] sd 0:0:1:0: tag#282 CDB: opcode=0xe5 (vendor) [ 996.306998][ C1] sd 0:0:1:0: tag#282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 996.315947][ C1] sd 0:0:1:0: tag#282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 996.324883][ C1] sd 0:0:1:0: tag#282 CDB[20]: ba 13:32:20 executing program 5: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x10, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x80, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x1}}) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x7ff, 0x0) 13:32:20 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="c7c2e2952bd1fe21b077e9d182a4e6d76d9003608c6aa8889aeb662a95c91e612a977cfcf3ca2635d004575e14a1ff8e02351ac9c104bcb02e8e04416b165598faff451608f5de9d18ff6571e33412a308936809ebeba3107db609a05d1ec2e4f6645ae41bc08b", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:32:20 executing program 2: mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d666402"]) 13:32:20 executing program 1: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:20 executing program 4: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:20 executing program 0: keyctl$set_timeout(0xf, 0x0, 0x216) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7d, 0x55) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x1f4) 13:32:21 executing program 2: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1, &(0x7f0000000840)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1, 0x0) clone3(&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 998.301525][T10477] 9pnet: Could not find request transport: fd [ 998.305721][ C1] sd 0:0:1:0: tag#283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.308996][T10477] 9pnet: Could not find request transport: fd [ 998.317544][ C1] sd 0:0:1:0: tag#283 CDB: opcode=0xe5 (vendor) [ 998.330027][ C1] sd 0:0:1:0: tag#283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 998.338982][ C1] sd 0:0:1:0: tag#283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 13:32:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x80000001}, {0x25}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) socket$nl_generic(0x10, 0x3, 0x10) [ 998.347957][ C1] sd 0:0:1:0: tag#283 CDB[20]: ba 13:32:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x2d}]}) 13:32:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x84, 0x0, &(0x7f0000000040)) 13:32:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 13:32:21 executing program 5: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x10, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x80, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x1}}) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x7ff, 0x0) 13:32:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 998.487310][ C0] sd 0:0:1:0: tag#284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.497187][ C0] sd 0:0:1:0: tag#284 CDB: opcode=0xe5 (vendor) [ 998.503450][ C0] sd 0:0:1:0: tag#284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 998.512418][ C0] sd 0:0:1:0: tag#284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 998.521401][ C0] sd 0:0:1:0: tag#284 CDB[20]: ba 13:32:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="c7c2e2952bd1fe21b077e9d182a4e6d76d9003608c6aa8889aeb662a95c91e612a977cfcf3ca2635d004575e14a1ff8e02351ac9c104bcb02e8e04416b165598faff451608f5de9d18ff6571e33412a308936809ebeba3107db609a05d1ec2e4f6645ae41bc08b", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:32:24 executing program 5: unshare(0x40400) set_mempolicy(0x4000, 0x0, 0x5) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x10, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x80, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x1}}) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x7ff, 0x0) 13:32:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:32:24 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x3, @thr={0x0, 0x0}}, 0x0) 13:32:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0x4}, 0x20) 13:32:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0x4}, 0x20) [ 1001.334245][T10522] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1001.352556][ C0] sd 0:0:1:0: tag#307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1001.362330][ C0] sd 0:0:1:0: tag#307 CDB: opcode=0xe5 (vendor) [ 1001.368716][ C0] sd 0:0:1:0: tag#307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1001.377666][ C0] sd 0:0:1:0: tag#307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1001.386600][ C0] sd 0:0:1:0: tag#307 CDB[20]: ba 13:32:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 1001.431600][T10543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 13:32:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="c7c2e2952bd1fe21b077e9d182a4e6d76d9003608c6aa8889aeb662a95c91e612a977cfcf3ca2635d004575e14a1ff8e02351ac9c104bcb02e8e04416b165598faff451608f5de9d18ff6571e33412a308936809ebeba3107db609a05d1ec2e4f6645ae41bc08b", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:32:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0x4}, 0x20) 13:32:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:27 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 13:32:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f09", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 13:32:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xf0, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x6}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0xf0}}, 0x0) 13:32:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f09", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0x4}, 0x20) 13:32:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x35, 0x0, 0x0, 0xfffffffe}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 13:32:27 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) set_mempolicy(0x2, &(0x7f0000001140)=0x3, 0x7ff) sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0}}], 0x1, 0x0) [ 1004.373485][T10562] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 13:32:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xa1ffffff}, {0x35, 0x0, 0x0, 0x8}, {0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:32:27 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000080)) [ 1004.425967][T10577] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1004.427838][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1004.443804][T10573] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 13:32:27 executing program 1: clone(0x28982400, &(0x7f0000000200)="bf", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 13:32:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f09", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:27 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 13:32:27 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43}, 0xfdef) write$P9_RREAD(r0, &(0x7f0000000280)={0x1001, 0x75, 0x0, {0xff6, "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"}}, 0x1001) [ 1004.487199][ T22] kauditd_printk_skb: 30 callbacks suppressed [ 1004.487253][ T22] audit: type=1326 audit(1632231147.177:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10584 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811007a739 code=0x0 13:32:27 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01]) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) listxattr(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000640)=""/169, 0xa9) 13:32:27 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1933, &(0x7f00000008c0), &(0x7f0000004000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000000940), &(0x7f0000000980)) 13:32:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f09", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80) 13:32:27 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f00fe050c100800080002000a000000", 0x24}], 0x1}, 0x0) 13:32:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1) 13:32:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x89f7, 0x0) 13:32:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001480)={0x1, &(0x7f0000001400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000000c0)={r0, r1+60000000}) 13:32:28 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000640)) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) 13:32:28 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 13:32:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000001c0)='./file0/file1\x00', 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000001300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x3, 0x2, 0x82, 0x8}, &(0x7f00000000c0)=0x20) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x42, r4}) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) [ 1005.311075][ T22] audit: type=1326 audit(1632231148.007:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10584 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811007a739 code=0x0 [ 1005.394529][T10617] ================================================================== [ 1005.402624][T10617] BUG: KCSAN: data-race in do_settimeofday64 / ktime_get_real_seconds [ 1005.410769][T10617] [ 1005.413077][T10617] write to 0xffffffff841669b8 of 8 bytes by task 10623 on cpu 1: [ 1005.420772][T10617] do_settimeofday64+0x404/0x5a0 [ 1005.425694][T10617] do_sys_settimeofday64+0x17b/0x1a0 [ 1005.430964][T10617] posix_clock_realtime_set+0x13/0x20 [ 1005.436317][T10617] __x64_sys_clock_settime+0x163/0x190 [ 1005.441759][T10617] do_syscall_64+0x44/0xa0 [ 1005.446247][T10617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1005.452432][T10617] [ 1005.454737][T10617] read to 0xffffffff841669b8 of 8 bytes by task 10617 on cpu 0: [ 1005.462350][T10617] ktime_get_real_seconds+0x11/0x20 [ 1005.467531][T10617] find_inode_bit+0x1f9/0x330 [ 1005.472193][T10617] __ext4_new_inode+0xc9a/0x2fd0 [ 1005.477118][T10617] ext4_symlink+0x2cc/0x700 [ 1005.481604][T10617] vfs_symlink+0x23f/0x350 [ 1005.486011][T10617] do_symlinkat+0x104/0x380 [ 1005.490495][T10617] __x64_sys_symlink+0x52/0x60 [ 1005.495238][T10617] do_syscall_64+0x44/0xa0 [ 1005.499638][T10617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1005.505515][T10617] [ 1005.507819][T10617] value changed: 0x000000006149deec -> 0x00000000000003ed [ 1005.514901][T10617] [ 1005.517203][T10617] Reported by Kernel Concurrency Sanitizer on: [ 1005.523328][T10617] CPU: 0 PID: 10617 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0 [ 1005.532073][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.542108][T10617] ================================================================== 13:32:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) 13:32:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001480)={0x1, &(0x7f0000001400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000000c0)={r0, r1+60000000}) 13:32:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1) 13:32:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x27, &(0x7f0000000140)="8d310783156939000000e28c0b1dd2a357cd64c8743d94b946cf885a21539a0c4a081ceea597cc"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) 13:32:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001480)={0x1, &(0x7f0000001400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000000c0)={r0, r1+60000000}) 13:32:28 executing program 4: unshare(0x4a060480) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) unshare(0x10000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\n \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x17\x00\b\x00\x17\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 13:32:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001480)={0x1, &(0x7f0000001400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000000c0)={r0, r1+60000000}) 13:32:28 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 13:32:28 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16b, &(0x7f0000000500)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1005.827292][ C1] sd 0:0:1:0: tag#285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1005.837709][ C1] sd 0:0:1:0: tag#285 CDB: opcode=0xe5 (vendor) [ 1005.843942][ C1] sd 0:0:1:0: tag#285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1005.852884][ C1] sd 0:0:1:0: tag#285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1005.861857][ C1] sd 0:0:1:0: tag#285 CDB[20]: ba 13:32:29 executing program 3: syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f00000020c0)='sysfs\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 13:32:29 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1612e2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 13:32:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1) 13:32:29 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 13:32:29 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 13:32:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:32:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530700ae890400000026b073639a1e954d5ab555b1dd249c54f2b004e1dcdd1fdf67e4d32711921cc5e41e4a2133d19ac53aa206b9eb4c29c07a5f919112bb21ed844ff13ba15ea8fc5f7a856aa041016365995db08e416a489d01931fe325fad0874270c47553b37a1d7986", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5b07070000326d0000888ad0194ded38cb00000000e779000000000000000040000000000000009fb54cf79deb23c40000000000003800000000000000000000000000000000000000cf30c46bb7c7904eb95f3b000000000000dd5ce6f9613fe66b17e94489651cd1ca000000000000000000"], 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 13:32:31 executing program 0: pipe(&(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 13:32:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1) [ 1008.666896][T10704] ------------[ cut here ]------------ [ 1008.672374][T10704] WARNING: CPU: 0 PID: 10704 at arch/x86/entry/vsyscall/vsyscall_64.c:277 emulate_vsyscall+0xaa9/0xd00 [ 1008.684227][T10704] Modules linked in: [ 1008.688203][T10704] CPU: 0 PID: 10704 Comm: syz-executor.3 Not tainted 5.15.0-rc2-syzkaller #0 [ 1008.697241][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.707333][T10704] RIP: 0010:emulate_vsyscall+0xaa9/0xd00 [ 1008.713083][T10704] Code: 9d 35 2b 00 4d 8b 3e 4c 89 ff 48 89 ee e8 af ee 23 00 49 39 ef 0f 85 55 02 00 00 e8 61 ec 23 00 e9 a0 f9 ff ff e8 57 ec 23 00 <0f> 0b e9 cb fb ff ff e8 4b ec 23 00 eb 75 e8 44 ec 23 00 eb 05 e8 [ 1008.732712][T10704] RSP: 0000:ffffc900021dbe30 EFLAGS: 00010283 [ 1008.738824][T10704] RAX: ffffffff81004b09 RBX: 0000000000000000 RCX: 0000000000040000 [ 1008.746799][T10704] RDX: ffffc900035a0000 RSI: 00000000000000d8 RDI: 00000000000000d9 [ 1008.754837][T10704] RBP: 0000000000000000 R08: ffffffff810046c6 R09: 000188813151b75f [ 1008.762827][T10704] R10: 0001ffff841668b7 R11: ffff88813151b000 R12: 0000000000000000 [ 1008.770820][T10704] R13: ffff88813151bb90 R14: ffffc900021dbf58 R15: 0000000000000000 [ 1008.778808][T10704] FS: 00007f810ddf2700(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 1008.787751][T10704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1008.794363][T10704] CR2: 0000000000cad11c CR3: 000000013362b000 CR4: 00000000001506f0 [ 1008.802424][T10704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1008.810439][T10704] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1008.818472][T10704] Call Trace: [ 1008.821744][T10704] do_user_addr_fault+0x1ef/0xbe0 [ 1008.826773][T10704] ? switch_fpu_return+0xa/0x10 [ 1008.831645][T10704] exc_page_fault+0x91/0x220 [ 1008.836237][T10704] ? asm_exc_page_fault+0x8/0x30 [ 1008.841207][T10704] asm_exc_page_fault+0x1e/0x30 [ 1008.846123][T10704] RIP: 0033:_end+0x7b3da000/0x0 [ 1008.851019][T10704] Code: Unable to access opcode bytes at RIP 0xffffffffff5fffd6. [ 1008.858762][T10704] RSP: 002b:00007f810ddf2188 EFLAGS: 00010246 13:32:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x68}}], 0x2, 0x0) 13:32:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, 0x0, &(0x7f00000012c0)) 13:32:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r0, &(0x7f0000000040)=""/35, 0x23) read$char_usb(r0, &(0x7f0000000080)=""/204, 0xcc) 13:32:31 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/thermal', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x6000, 0x0) 13:32:31 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x244002, 0x0) clone(0x80792c532a1100, 0x0, 0x0, 0x0, 0x0) [ 1008.864820][T10704] RAX: ffffffffffffffda RBX: c423eb9df74cb59f RCX: 61f9e65cdd000000 [ 1008.872845][T10704] RDX: 658944e9176be63f RSI: 0000000000cad11c RDI: 0000000000000000 [ 1008.880836][T10704] RBP: 0000000000000040 R08: c7b76bc430cf0000 R09: 0000000000000000 [ 1008.888826][T10704] R10: 0000000000000000 R11: 0038000000000000 R12: 0000000000000000 [ 1008.896795][T10704] R13: 79e700000000cb38 R14: ed4d19d08a880000 R15: 6d32000007075b1b [ 1008.904790][T10704] ---[ end trace 433de1f894e17663 ]--- 13:32:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530700ae890400000026b073639a1e954d5ab555b1dd249c54f2b004e1dcdd1fdf67e4d32711921cc5e41e4a2133d19ac53aa206b9eb4c29c07a5f919112bb21ed844ff13ba15ea8fc5f7a856aa041016365995db08e416a489d01931fe325fad0874270c47553b37a1d7986", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5b07070000326d0000888ad0194ded38cb00000000e779000000000000000040000000000000009fb54cf79deb23c40000000000003800000000000000000000000000000000000000cf30c46bb7c7904eb95f3b000000000000dd5ce6f9613fe66b17e94489651cd1ca000000000000000000"], 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:31 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x5, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu>0||\t!\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') 13:32:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530700ae890400000026b073639a1e954d5ab555b1dd249c54f2b004e1dcdd1fdf67e4d32711921cc5e41e4a2133d19ac53aa206b9eb4c29c07a5f919112bb21ed844ff13ba15ea8fc5f7a856aa041016365995db08e416a489d01931fe325fad0874270c47553b37a1d7986", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5b07070000326d0000888ad0194ded38cb00000000e779000000000000000040000000000000009fb54cf79deb23c40000000000003800000000000000000000000000000000000000cf30c46bb7c7904eb95f3b000000000000dd5ce6f9613fe66b17e94489651cd1ca000000000000000000"], 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 13:32:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530700ae890400000026b073639a1e954d5ab555b1dd249c54f2b004e1dcdd1fdf67e4d32711921cc5e41e4a2133d19ac53aa206b9eb4c29c07a5f919112bb21ed844ff13ba15ea8fc5f7a856aa041016365995db08e416a489d01931fe325fad0874270c47553b37a1d7986", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5b07070000326d0000888ad0194ded38cb00000000e779000000000000000040000000000000009fb54cf79deb23c40000000000003800000000000000000000000000000000000000cf30c46bb7c7904eb95f3b000000000000dd5ce6f9613fe66b17e94489651cd1ca000000000000000000"], 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:32 executing program 0: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 13:32:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f0000000000)={0x80}) close(r0) 13:32:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/160, 0xa0}], 0x1, 0xffffff00, 0x0) 13:32:32 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 13:32:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="05051f6d32b1b4d8d1fe19"], 0xe8}}, 0x0) clone(0x82100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3e) 13:32:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="26530700ae897094e7b12626d4030300", 0x10}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, 0x0, 0x0) 13:32:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 13:32:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4008004, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x5}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 13:32:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="26530700ae897094e7b12626d4030300", 0x10}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020003000000080001000e000f00240004800500030080"], 0x48}}, 0x0) 13:32:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:34 executing program 0: clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f392a956c5c6ba1cb34401e0b937fd387b5417a936a634cc044a48bb1e566b916f9900670f4036a2bbe86593ad66b0d195e51b7a214ec6de52cbb5fc102a2da113ed094a97753bcc1f97c18b16ac4ffb8c8e9df2d3e94cc000435a45066629a2b6271c030bf228a1ea1c7bfb14c521eb5eef5bd76cbc0307c90fc", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xc63b9e35) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:34 executing program 3: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/235) 13:32:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0x50000}]}]}, 0x20}}, 0x0) 13:32:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="26530700ae897094e7b12626d4030300", 0x10}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 1012.011619][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:34 executing program 0: creat(&(0x7f0000000b80)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='./bus\x00') 13:32:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020003000000080001000e000f00240004800500030080"], 0x48}}, 0x0) [ 1012.107910][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="26530700ae897094e7b12626d4030300", 0x10}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:32:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 13:32:36 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13:32:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='codepage=775,nodots,dots,quiet,dots,dots,nodots']) 13:32:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020003000000080001000e000f00240004800500030080"], 0x48}}, 0x0) 13:32:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000001540)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10ffd600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "36cfe9537217829ae3c72a476a4c0665b17110"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/46, 0x2e}], 0x1) dup3(r1, r0, 0x0) 13:32:36 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:32:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13:32:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x4) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) [ 1013.705224][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020003000000080001000e000f00240004800500030080"], 0x48}}, 0x0) 13:32:36 executing program 2: mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000447000/0x2000)=nil, 0x2000, 0x0) 13:32:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 1013.792676][T10836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:32:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13:32:38 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x13, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000002a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001010}, 0x0) preadv(r1, &(0x7f0000001800)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000002a40)=""/59, 0x3b}, {0x0}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000740)=""/4093, 0xffd}, {&(0x7f0000001740)=""/133, 0x85}], 0x8, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000066c40)) 13:32:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001a005f0014f9f4070009040002000000000000000000000008001c0000000000", 0x24) 13:32:38 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:32:38 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xbbf, 0x5) acct(&(0x7f0000000040)='./file0\x00') 13:32:38 executing program 1: syz_mount_image$nfs4(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) lstat(&(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780))