) listen(r2, 0x7f) 12:19:12 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 3) [ 503.694798][T13731] RDX: 0000000020000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 503.702772][T13731] RBP: 00007f6b38fac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.710818][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.718797][T13731] R13: 00007ffc9680bc4f R14: 00007f6b38fac300 R15: 0000000000022000 [ 503.726782][T13731] 12:19:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) (fail_nth: 3) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 503.793010][ C1] sd 0:0:1:0: [sda] tag#353 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.803341][ C1] sd 0:0:1:0: [sda] tag#353 CDB: opcode=0xe5 (vendor) [ 503.810116][ C1] sd 0:0:1:0: [sda] tag#353 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 503.811908][T13742] FAULT_INJECTION: forcing a failure. [ 503.811908][T13742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.819633][ C1] sd 0:0:1:0: [sda] tag#353 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 503.819674][ C1] sd 0:0:1:0: [sda] tag#353 CDB[20]: ba [ 503.848193][T13742] CPU: 0 PID: 13742 Comm: syz-executor.1 Not tainted 5.16.0-syzkaller #0 [ 503.856614][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.866680][T13742] Call Trace: [ 503.869959][T13742] [ 503.872889][T13742] dump_stack_lvl+0xd6/0x122 [ 503.877502][T13742] dump_stack+0x11/0x1b [ 503.881738][T13742] should_fail+0x23c/0x250 [ 503.886254][T13742] should_fail_usercopy+0x16/0x20 [ 503.891365][T13742] _copy_to_user+0x1c/0x90 [ 503.895789][T13742] simple_read_from_buffer+0xab/0x120 [ 503.901179][T13742] proc_fail_nth_read+0x10d/0x150 [ 503.906329][T13742] ? proc_fault_inject_write+0x230/0x230 [ 503.912033][T13742] vfs_read+0x1e6/0x750 [ 503.916198][T13742] ? __fget_files+0x1d2/0x210 [ 503.920888][T13742] ksys_read+0xd9/0x190 [ 503.925051][T13742] __x64_sys_read+0x3e/0x50 [ 503.929559][T13742] do_syscall_64+0x44/0xd0 [ 503.933976][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.939929][T13742] RIP: 0033:0x7f6b39de8b9c [ 503.944350][T13742] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 503.963994][T13742] RSP: 002b:00007f6b38fac160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.972467][T13742] RAX: ffffffffffffffda RBX: 00007f6b39f48f60 RCX: 00007f6b39de8b9c [ 503.980450][T13742] RDX: 000000000000000f RSI: 00007f6b38fac1e0 RDI: 0000000000000006 [ 503.988479][T13742] RBP: 00007f6b38fac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.996450][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.004422][T13742] R13: 00007ffc9680bc4f R14: 00007f6b38fac300 R15: 0000000000022000 [ 504.012403][T13742] [ 504.045021][T13746] FAULT_INJECTION: forcing a failure. [ 504.045021][T13746] name failslab, interval 1, probability 0, space 0, times 0 [ 504.057804][T13746] CPU: 1 PID: 13746 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 504.066277][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.076339][T13746] Call Trace: [ 504.079619][T13746] [ 504.082584][T13746] dump_stack_lvl+0xd6/0x122 [ 504.087190][T13746] dump_stack+0x11/0x1b [ 504.091402][T13746] should_fail+0x23c/0x250 [ 504.095902][T13746] __should_failslab+0x81/0x90 [ 504.100677][T13746] should_failslab+0x5/0x20 [ 504.105205][T13746] kmem_cache_alloc_node+0x61/0x2d0 [ 504.110463][T13746] ? __alloc_skb+0xf0/0x450 [ 504.115026][T13746] __alloc_skb+0xf0/0x450 [ 504.119384][T13746] netlink_sendmsg+0x4fe/0x850 [ 504.124236][T13746] ? netlink_getsockopt+0x720/0x720 [ 504.129506][T13746] ____sys_sendmsg+0x39a/0x510 [ 504.134302][T13746] __sys_sendmsg+0x195/0x230 [ 504.138908][T13746] __x64_sys_sendmsg+0x42/0x50 [ 504.143678][T13746] do_syscall_64+0x44/0xd0 [ 504.148093][T13746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.154057][T13746] RIP: 0033:0x7f2d0a410fe9 [ 504.158469][T13746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.178109][T13746] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.186532][T13746] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 12:19:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 504.194506][T13746] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 504.202485][T13746] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.210458][T13746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.218438][T13746] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 504.226417][T13746] 12:19:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:13 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = memfd_secret(0x80000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) write(r0, &(0x7f0000000140)="d5", 0x1) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x1, 0x9, 0x8, 0x0, 0x2, 0x10000a, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x414, 0x100000001, 0x6, 0x1, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) pread64(r5, &(0x7f00000002c0)=""/19, 0x13, 0x6) listen(r2, 0x7f) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) memfd_secret(0x80000) (async) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)) (async) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000100)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) (async) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x1, 0x9, 0x8, 0x0, 0x2, 0x10000a, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x414, 0x100000001, 0x6, 0x1, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) (async) pread64(r5, &(0x7f00000002c0)=""/19, 0x13, 0x6) (async) listen(r2, 0x7f) (async) [ 504.379810][ C0] sd 0:0:1:0: [sda] tag#368 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.390159][ C0] sd 0:0:1:0: [sda] tag#368 CDB: opcode=0xe5 (vendor) [ 504.396953][ C0] sd 0:0:1:0: [sda] tag#368 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 504.406452][ C0] sd 0:0:1:0: [sda] tag#368 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 504.415948][ C0] sd 0:0:1:0: [sda] tag#368 CDB[20]: ba 12:19:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 4) [ 504.558611][T13772] FAULT_INJECTION: forcing a failure. [ 504.558611][T13772] name failslab, interval 1, probability 0, space 0, times 0 [ 504.571360][T13772] CPU: 0 PID: 13772 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 504.579787][T13772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.589895][T13772] Call Trace: [ 504.593181][T13772] [ 504.596113][T13772] dump_stack_lvl+0xd6/0x122 [ 504.601501][T13772] dump_stack+0x11/0x1b [ 504.605719][T13772] should_fail+0x23c/0x250 [ 504.610148][T13772] __should_failslab+0x81/0x90 [ 504.614978][T13772] should_failslab+0x5/0x20 [ 504.619618][T13772] kmem_cache_alloc_node_trace+0x61/0x310 [ 504.625393][T13772] ? __kmalloc_node_track_caller+0x30/0x40 [ 504.631227][T13772] __kmalloc_node_track_caller+0x30/0x40 [ 504.636869][T13772] ? netlink_sendmsg+0x4fe/0x850 [ 504.641814][T13772] __alloc_skb+0x19d/0x450 [ 504.646250][T13772] netlink_sendmsg+0x4fe/0x850 [ 504.651066][T13772] ? netlink_getsockopt+0x720/0x720 [ 504.656341][T13772] ____sys_sendmsg+0x39a/0x510 [ 504.661119][T13772] __sys_sendmsg+0x195/0x230 [ 504.665734][T13772] __x64_sys_sendmsg+0x42/0x50 [ 504.670542][T13772] do_syscall_64+0x44/0xd0 [ 504.674982][T13772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.680962][T13772] RIP: 0033:0x7f2d0a410fe9 [ 504.685489][T13772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:19:13 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = memfd_secret(0x80000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000100)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x1, 0x9, 0x8, 0x0, 0x2, 0x10000a, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x414, 0x100000001, 0x6, 0x1, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) pread64(r5, &(0x7f00000002c0)=""/19, 0x13, 0x6) (async) listen(r2, 0x7f) 12:19:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 504.705104][T13772] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.713574][T13772] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 504.721627][T13772] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 504.729605][T13772] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.737580][T13772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.745558][T13772] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 504.753535][T13772] 12:19:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 5) [ 504.767780][ C0] sd 0:0:1:0: [sda] tag#370 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.778081][ C0] sd 0:0:1:0: [sda] tag#370 CDB: opcode=0xe5 (vendor) [ 504.784879][ C0] sd 0:0:1:0: [sda] tag#370 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 504.794361][ C0] sd 0:0:1:0: [sda] tag#370 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 504.803849][ C0] sd 0:0:1:0: [sda] tag#370 CDB[20]: ba [ 504.828632][T13784] FAULT_INJECTION: forcing a failure. [ 504.828632][T13784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.841771][T13784] CPU: 0 PID: 13784 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 504.850201][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.861130][T13784] Call Trace: [ 504.864420][T13784] [ 504.867365][T13784] dump_stack_lvl+0xd6/0x122 [ 504.872034][T13784] dump_stack+0x11/0x1b [ 504.876239][T13784] should_fail+0x23c/0x250 [ 504.877907][T13789] hugetlbfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 504.880661][T13784] should_fail_usercopy+0x16/0x20 [ 504.891437][T13784] _copy_from_iter+0x131/0xa00 [ 504.896213][T13784] ? check_stack_object+0x61/0x70 [ 504.901338][T13784] ? __virt_addr_valid+0x15a/0x1a0 [ 504.906461][T13784] ? __check_object_size+0x22a/0x2d0 [ 504.912364][T13784] netlink_sendmsg+0x5bb/0x850 [ 504.917154][T13784] ? netlink_getsockopt+0x720/0x720 [ 504.922365][T13784] ____sys_sendmsg+0x39a/0x510 [ 504.927248][T13784] __sys_sendmsg+0x195/0x230 [ 504.931853][T13784] __x64_sys_sendmsg+0x42/0x50 [ 504.936622][T13784] do_syscall_64+0x44/0xd0 [ 504.941046][T13784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.947039][T13784] RIP: 0033:0x7f2d0a410fe9 [ 504.951465][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.971158][T13784] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:19:13 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x11000, &(0x7f0000000280)=ANY=[@ANYRES64]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x28) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88080) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) 12:19:13 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = accept(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) fallocate(r1, 0x1d, 0x6c2, 0x7f) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r4, &(0x7f0000000340)="b3", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040), 0x8) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:13 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x11000, &(0x7f0000000280)=ANY=[@ANYRES64]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x28) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88080) (async, rerun: 32) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) (rerun: 32) [ 504.979581][T13784] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 504.987559][T13784] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 504.988014][ C1] sd 0:0:1:0: [sda] tag#382 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.995533][T13784] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.995547][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.995559][T13784] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 12:19:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 6) [ 505.005828][ C1] sd 0:0:1:0: [sda] tag#382 CDB: opcode=0xe5 (vendor) [ 505.013757][T13784] [ 505.039553][ C1] sd 0:0:1:0: [sda] tag#382 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 505.049045][ C1] sd 0:0:1:0: [sda] tag#382 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 505.058539][ C1] sd 0:0:1:0: [sda] tag#382 CDB[20]: ba [ 505.083543][T13796] hugetlbfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 505.087874][T13799] FAULT_INJECTION: forcing a failure. [ 505.087874][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 505.102012][T13799] CPU: 0 PID: 13799 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 505.110674][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.120736][T13799] Call Trace: [ 505.124094][T13799] [ 505.127022][T13799] dump_stack_lvl+0xd6/0x122 [ 505.131680][T13799] dump_stack+0x11/0x1b [ 505.135844][T13799] should_fail+0x23c/0x250 [ 505.140265][T13799] ? skb_clone+0x12c/0x1f0 [ 505.145466][T13799] __should_failslab+0x81/0x90 [ 505.150242][T13799] should_failslab+0x5/0x20 [ 505.154751][T13799] kmem_cache_alloc+0x4f/0x320 [ 505.159528][T13799] skb_clone+0x12c/0x1f0 [ 505.163776][T13799] netlink_deliver_tap+0x2da/0x510 [ 505.168921][T13799] netlink_unicast+0x5e4/0x6d0 [ 505.173693][T13799] netlink_sendmsg+0x728/0x850 [ 505.178470][T13799] ? netlink_getsockopt+0x720/0x720 [ 505.183674][T13799] ____sys_sendmsg+0x39a/0x510 [ 505.188449][T13799] __sys_sendmsg+0x195/0x230 [ 505.193050][T13799] __x64_sys_sendmsg+0x42/0x50 [ 505.197879][T13799] do_syscall_64+0x44/0xd0 [ 505.202370][T13799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.208293][T13799] RIP: 0033:0x7f2d0a410fe9 [ 505.212712][T13799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:19:14 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x11000, &(0x7f0000000280)=ANY=[@ANYRES64]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x28) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88080) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x11000, &(0x7f0000000280)=ANY=[@ANYRES64]) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) (async) pipe(&(0x7f0000000040)) (async) utimensat(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x28) (async) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88080) (async) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) (async) 12:19:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 505.232369][T13799] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.240818][T13799] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 505.248826][T13799] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 505.256802][T13799] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.264823][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.272876][T13799] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 505.280864][T13799] 12:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 7) [ 505.326272][T13806] hugetlbfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 505.394934][T13814] FAULT_INJECTION: forcing a failure. [ 505.394934][T13814] name failslab, interval 1, probability 0, space 0, times 0 [ 505.407626][T13814] CPU: 0 PID: 13814 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 505.416052][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.426113][T13814] Call Trace: [ 505.429396][T13814] [ 505.432368][T13814] dump_stack_lvl+0xd6/0x122 [ 505.436971][T13814] dump_stack+0x11/0x1b [ 505.441130][T13814] should_fail+0x23c/0x250 [ 505.445629][T13814] ? skb_clone+0x12c/0x1f0 [ 505.450053][T13814] __should_failslab+0x81/0x90 [ 505.454831][T13814] should_failslab+0x5/0x20 [ 505.459402][T13814] kmem_cache_alloc+0x4f/0x320 [ 505.464172][T13814] skb_clone+0x12c/0x1f0 [ 505.468421][T13814] nfnetlink_rcv+0x2eb/0x13d0 [ 505.473125][T13814] ? xfd_validate_state+0x4e/0xf0 [ 505.478156][T13814] ? __kfree_skb+0xfe/0x150 [ 505.482666][T13814] ? consume_skb+0x48/0x160 [ 505.487190][T13814] ? nlmon_xmit+0x5f/0x70 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 505.491526][T13814] ? __this_cpu_preempt_check+0x18/0x20 [ 505.497153][T13814] ? __local_bh_enable_ip+0x4d/0x70 [ 505.502427][T13814] ? local_bh_enable+0x1b/0x20 [ 505.507204][T13814] ? __dev_queue_xmit+0x59b/0xf90 [ 505.512298][T13814] ? __skb_clone+0x2db/0x300 [ 505.516895][T13814] ? __rcu_read_unlock+0x5c/0x290 [ 505.521928][T13814] ? netlink_deliver_tap+0x74/0x510 [ 505.527136][T13814] netlink_unicast+0x602/0x6d0 [ 505.531912][T13814] netlink_sendmsg+0x728/0x850 [ 505.536689][T13814] ? netlink_getsockopt+0x720/0x720 [ 505.541907][T13814] ____sys_sendmsg+0x39a/0x510 [ 505.546679][T13814] __sys_sendmsg+0x195/0x230 [ 505.551282][T13814] __x64_sys_sendmsg+0x42/0x50 [ 505.556051][T13814] do_syscall_64+0x44/0xd0 [ 505.560546][T13814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.566454][T13814] RIP: 0033:0x7f2d0a410fe9 [ 505.570945][T13814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:19:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 12:19:14 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = accept(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) fallocate(r1, 0x1d, 0x6c2, 0x7f) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000340)="b3", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r4, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 8) 12:19:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x4b47, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 505.590558][T13814] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.598974][T13814] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 505.606952][T13814] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 505.614927][T13814] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.622942][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.622989][T13814] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 9) [ 505.623008][T13814] [ 505.647687][ C1] sd 0:0:1:0: [sda] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.647737][ C1] sd 0:0:1:0: [sda] tag#345 CDB: opcode=0xe5 (vendor) 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:14 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = accept(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) fallocate(r1, 0x1d, 0x6c2, 0x7f) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000340)="b3", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) shutdown(r4, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040), 0x8) (rerun: 64) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (fail_nth: 10) 12:19:14 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 505.647769][ C1] sd 0:0:1:0: [sda] tag#345 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 505.647791][ C1] sd 0:0:1:0: [sda] tag#345 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 505.647814][ C1] sd 0:0:1:0: [sda] tag#345 CDB[20]: ba [ 505.678492][T13834] FAULT_INJECTION: forcing a failure. [ 505.678492][T13834] name failslab, interval 1, probability 0, space 0, times 0 [ 505.678515][T13834] CPU: 1 PID: 13834 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 505.678536][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.678546][T13834] Call Trace: [ 505.678606][T13834] [ 505.678612][T13834] dump_stack_lvl+0xd6/0x122 [ 505.678637][T13834] dump_stack+0x11/0x1b [ 505.678657][T13834] should_fail+0x23c/0x250 [ 505.678742][T13834] ? nfnetlink_rcv+0x8eb/0x13d0 [ 505.678924][T13834] __should_failslab+0x81/0x90 [ 505.678947][T13834] should_failslab+0x5/0x20 [ 505.678998][T13834] kmem_cache_alloc_trace+0x52/0x350 [ 505.679063][T13834] ? __nla_parse+0x3c/0x50 [ 505.679155][T13834] nfnetlink_rcv+0x8eb/0x13d0 [ 505.679240][T13834] netlink_unicast+0x602/0x6d0 [ 505.679266][T13834] netlink_sendmsg+0x728/0x850 [ 505.679306][T13834] ? netlink_getsockopt+0x720/0x720 [ 505.679328][T13834] ____sys_sendmsg+0x39a/0x510 [ 505.679351][T13834] __sys_sendmsg+0x195/0x230 [ 505.679374][T13834] __x64_sys_sendmsg+0x42/0x50 [ 505.679474][T13834] do_syscall_64+0x44/0xd0 [ 505.679493][T13834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.679577][T13834] RIP: 0033:0x7f2d0a410fe9 [ 505.679593][T13834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.679609][T13834] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.679627][T13834] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 505.679639][T13834] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 505.679652][T13834] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.679741][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.679753][T13834] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 505.679768][T13834] [ 505.743207][T13839] FAULT_INJECTION: forcing a failure. [ 505.743207][T13839] name failslab, interval 1, probability 0, space 0, times 0 [ 505.743232][T13839] CPU: 0 PID: 13839 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 505.743274][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.743285][T13839] Call Trace: [ 505.743291][T13839] [ 505.743298][T13839] dump_stack_lvl+0xd6/0x122 [ 505.743323][T13839] dump_stack+0x11/0x1b [ 505.743342][T13839] should_fail+0x23c/0x250 [ 505.743422][T13839] ? nfnetlink_rcv+0x8eb/0x13d0 [ 505.743447][T13839] __should_failslab+0x81/0x90 [ 505.743470][T13839] should_failslab+0x5/0x20 [ 505.743549][T13839] kmem_cache_alloc_trace+0x52/0x350 [ 505.743659][T13839] ? __nla_parse+0x3c/0x50 [ 505.743679][T13839] nfnetlink_rcv+0x8eb/0x13d0 [ 505.743712][T13839] netlink_unicast+0x602/0x6d0 [ 505.743736][T13839] netlink_sendmsg+0x728/0x850 [ 505.743793][T13839] ? netlink_getsockopt+0x720/0x720 [ 505.743814][T13839] ____sys_sendmsg+0x39a/0x510 [ 505.743846][T13839] __sys_sendmsg+0x195/0x230 [ 505.743872][T13839] __x64_sys_sendmsg+0x42/0x50 [ 505.743891][T13839] do_syscall_64+0x44/0xd0 [ 505.743926][T13839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.743948][T13839] RIP: 0033:0x7f2d0a410fe9 [ 505.743960][T13839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.744046][T13839] RSP: 002b:00007f2d09587168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.744065][T13839] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a410fe9 [ 505.744078][T13839] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 505.744090][T13839] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.744114][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.744125][T13839] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 505.744139][T13839] [ 505.780683][T13844] FAULT_INJECTION: forcing a failure. [ 505.780683][T13844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.780706][T13844] CPU: 0 PID: 13844 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0 [ 505.780725][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.780784][T13844] Call Trace: [ 505.780791][T13844] [ 505.780803][T13844] dump_stack_lvl+0xd6/0x122 [ 505.780857][T13844] dump_stack+0x11/0x1b [ 505.780927][T13844] should_fail+0x23c/0x250 [ 505.780948][T13844] should_fail_usercopy+0x16/0x20 [ 505.780973][T13844] _copy_to_user+0x1c/0x90 [ 505.780992][T13844] simple_read_from_buffer+0xab/0x120 [ 505.781011][T13844] proc_fail_nth_read+0x10d/0x150 [ 505.781060][T13844] ? proc_fault_inject_write+0x230/0x230 [ 505.781082][T13844] vfs_read+0x1e6/0x750 [ 505.781149][T13844] ? __fget_files+0x1d2/0x210 [ 505.781173][T13844] ksys_read+0xd9/0x190 [ 505.781190][T13844] __x64_sys_read+0x3e/0x50 [ 505.781207][T13844] do_syscall_64+0x44/0xd0 [ 505.781265][T13844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.781317][T13844] RIP: 0033:0x7f2d0a3c3b9c [ 505.781331][T13844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 505.781352][T13844] RSP: 002b:00007f2d09587160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.781370][T13844] RAX: ffffffffffffffda RBX: 00007f2d0a523f60 RCX: 00007f2d0a3c3b9c [ 505.781394][T13844] RDX: 000000000000000f RSI: 00007f2d095871e0 RDI: 0000000000000004 [ 505.781406][T13844] RBP: 00007f2d095871d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.781418][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.781430][T13844] R13: 00007ffe06db71cf R14: 00007f2d09587300 R15: 0000000000022000 [ 505.781445][T13844] [ 505.819987][ C0] sd 0:0:1:0: [sda] tag#351 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.820016][ C0] sd 0:0:1:0: [sda] tag#351 CDB: opcode=0xe5 (vendor) 12:19:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x4b49, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) 12:19:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) (async) [ 505.820039][ C0] sd 0:0:1:0: [sda] tag#351 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 505.820059][ C0] sd 0:0:1:0: [sda] tag#351 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 505.820078][ C0] sd 0:0:1:0: [sda] tag#351 CDB[20]: ba 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) (async) 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000f8a3f5b5abb59aa52600000000660d81be93e852744ca38d008ae00000bf670000000000001510a1836a789d9d01070600000fff07ef7607000002000000070600000ee60000bf0500000000000000070700004c0000001f750000000000008d08497baeb0794b5dbf54220000000080070500000400f9ffad43010000000000958c5ec404a5a31a323aef1e49c98b25cb71d6b8c6bebbd3a88df0b5db72919db7dafc388580d67f37957e083ac00000000000000000000000e6ffffff00000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x80) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x1a, 0x3f, 0x2, 0x0, 0x2, 0x12000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7}, 0x8a0, 0xb5, 0x53, 0x6, 0x4, 0x9, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000ac06a1135700b31fbf9d3cbb23aac891c9c55228934de5f9dc431378d6ae35c5c5adcd01c637d8c6435e0e1c5befcc896e6f9816a94384936e614eb823be1ff26c34ade3f6e3ce9e0e20790b6d4066f3ec0c2eb59a4265a27ef996e1f0b300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x24008004) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00ca28bd7000fc362a4cc345bef2ba98efcef8e2dbc39200000000080001008d8428a95462f685989ab226e08a22fe4932a89e6b97ab3dc7069597c3e8032ef70674debc57d0482ad2724f7d0748f85c6940175e308dfbbf11c378f0a0e5c5e88dccc0036798ea4fe63aed77a749f7de0f1489a5fea7d5d3b0e215e136852e658edbf4652c56efaaaa9ecca377b1b9e6b4643e51f326099d8ff31a9c98e0718164050da72aba85958298c0408f99faa69611b0f2f1d887a5b3677b74771a1c3cb23c9594b9d381f706e6eb48c1dfd30e0058d25c7996d8c1afd7280c9b212b60bba318e9fface8aeaa418143643057609dc649e071137c2479b0a15638c3ff4fc420dc40371ccdc89f16ce1b6567456d9b703cd7272932ebe189cf00fd8c50e0d973bb4a82fc50ed5e695fb43f4c65af056f", @ANYRES32=r2, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400380000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="fe2d41aca759899cb993e09bb4f8d9426395a3adcad74cdbc040f6d11f5b79195a7382ff860b81b63b26de3f30167139c73d2184b8f88000bb7af2903ba5ffc8c33c7c1606ba5ae8d2abd29abc33a6c9d50898ec239fa55889f27f5e9d8cd870596b4dc35fc70e9ef71e76e401db8230670babdeecf3412847622d9466e501001fd529a2cd0aaa83cae00de637e0c4c0733959eb219980080bf3279d22b6a28fe8cb7c0c06b2a9e1b152778b12d50b814d89a56f5bcb2390bacbd38dcfb3ead23bc42190804bf54d96eb71dbb48625"], 0x108}, 0x1, 0x0, 0x0, 0x20000085}, 0x841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4f0000003be410e49592dc32000000000000e0ffffff62ac8e8daef1e650ba82f4cfbd4a4a07b2770f3a32a227810b96a0b19a0000000000006deff5001ef245d2508100"/78, @ANYRESHEX, @ANYBLOB="0764022890294d3eb32b03000000000000200012800b00c90067656e65766500001000028006000500030000000100000008000500", @ANYRESHEX, @ANYBLOB="08000a00fb7b11", @ANYRES32=r1, @ANYRES32], 0x50}}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="609404002100000429bd7010ffdbdf250a80140600003556a1dc7940a8c96bf35169701700060a00010008000f001303000014000200fc0200000000000000000000000b82b80fd5bf5c39860f73306400000114000200fc02000000000001000000000000c023e20d04000000000000"], 0x60}}, 0x4002000) lseek(0xffffffffffffffff, 0x4, 0x2) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0xd0, 0x10, 0x401, 0x350, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3323}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0xd0}}, 0x0) [ 506.523601][ C0] sd 0:0:1:0: [sda] tag#366 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.533904][ C0] sd 0:0:1:0: [sda] tag#366 CDB: opcode=0xe5 (vendor) [ 506.540692][ C0] sd 0:0:1:0: [sda] tag#366 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 506.550219][ C0] sd 0:0:1:0: [sda] tag#366 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 506.559708][ C0] sd 0:0:1:0: [sda] tag#366 CDB[20]: ba 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x541b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000f8a3f5b5abb59aa52600000000660d81be93e852744ca38d008ae00000bf670000000000001510a1836a789d9d01070600000fff07ef7607000002000000070600000ee60000bf0500000000000000070700004c0000001f750000000000008d08497baeb0794b5dbf54220000000080070500000400f9ffad43010000000000958c5ec404a5a31a323aef1e49c98b25cb71d6b8c6bebbd3a88df0b5db72919db7dafc388580d67f37957e083ac00000000000000000000000e6ffffff00000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x80) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x1a, 0x3f, 0x2, 0x0, 0x2, 0x12000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7}, 0x8a0, 0xb5, 0x53, 0x6, 0x4, 0x9, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000ac06a1135700b31fbf9d3cbb23aac891c9c55228934de5f9dc431378d6ae35c5c5adcd01c637d8c6435e0e1c5befcc896e6f9816a94384936e614eb823be1ff26c34ade3f6e3ce9e0e20790b6d4066f3ec0c2eb59a4265a27ef996e1f0b300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x24008004) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400380000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="fe2d41aca759899cb993e09bb4f8d9426395a3adcad74cdbc040f6d11f5b79195a7382ff860b81b63b26de3f30167139c73d2184b8f88000bb7af2903ba5ffc8c33c7c1606ba5ae8d2abd29abc33a6c9d50898ec239fa55889f27f5e9d8cd870596b4dc35fc70e9ef71e76e401db8230670babdeecf3412847622d9466e501001fd529a2cd0aaa83cae00de637e0c4c0733959eb219980080bf3279d22b6a28fe8cb7c0c06b2a9e1b152778b12d50b814d89a56f5bcb2390bacbd38dcfb3ead23bc42190804bf54d96eb71dbb48625"], 0x108}, 0x1, 0x0, 0x0, 0x20000085}, 0x841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4f0000003be410e49592dc32000000000000e0ffffff62ac8e8daef1e650ba82f4cfbd4a4a07b2770f3a32a227810b96a0b19a0000000000006deff5001ef245d2508100"/78, @ANYRESHEX, @ANYBLOB="0764022890294d3eb32b03000000000000200012800b00c90067656e65766500001000028006000500030000000100000008000500", @ANYRESHEX, @ANYBLOB="08000a00fb7b11", @ANYRES32=r1, @ANYRES32], 0x50}}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="609404002100000429bd7010ffdbdf250a80140600003556a1dc7940a8c96bf35169701700060a00010008000f001303000014000200fc0200000000000000000000000b82b80fd5bf5c39860f73306400000114000200fc02000000000001000000000000c023e20d04000000000000"], 0x60}}, 0x4002000) lseek(0xffffffffffffffff, 0x4, 0x2) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0xd0, 0x10, 0x401, 0x350, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3323}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0xd0}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000f8a3f5b5abb59aa52600000000660d81be93e852744ca38d008ae00000bf670000000000001510a1836a789d9d01070600000fff07ef7607000002000000070600000ee60000bf0500000000000000070700004c0000001f750000000000008d08497baeb0794b5dbf54220000000080070500000400f9ffad43010000000000958c5ec404a5a31a323aef1e49c98b25cb71d6b8c6bebbd3a88df0b5db72919db7dafc388580d67f37957e083ac00000000000000000000000e6ffffff00000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x1a, 0x3f, 0x2, 0x0, 0x2, 0x12000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7}, 0x8a0, 0xb5, 0x53, 0x6, 0x4, 0x9, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) (async) socket(0x0, 0x803, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000ac06a1135700b31fbf9d3cbb23aac891c9c55228934de5f9dc431378d6ae35c5c5adcd01c637d8c6435e0e1c5befcc896e6f9816a94384936e614eb823be1ff26c34ade3f6e3ce9e0e20790b6d4066f3ec0c2eb59a4265a27ef996e1f0b300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x24008004) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00ca28bd7000fc362a4cc345bef2ba98efcef8e2dbc39200000000080001008d8428a95462f685989ab226e08a22fe4932a89e6b97ab3dc7069597c3e8032ef70674debc57d0482ad2724f7d0748f85c6940175e308dfbbf11c378f0a0e5c5e88dccc0036798ea4fe63aed77a749f7de0f1489a5fea7d5d3b0e215e136852e658edbf4652c56efaaaa9ecca377b1b9e6b4643e51f326099d8ff31a9c98e0718164050da72aba85958298c0408f99faa69611b0f2f1d887a5b3677b74771a1c3cb23c9594b9d381f706e6eb48c1dfd30e0058d25c7996d8c1afd7280c9b212b60bba318e9fface8aeaa418143643057609dc649e071137c2479b0a15638c3ff4fc420dc40371ccdc89f16ce1b6567456d9b703cd7272932ebe189cf00fd8c50e0d973bb4a82fc50ed5e695fb43f4c65af056f", @ANYRES32=r2, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400380000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="fe2d41aca759899cb993e09bb4f8d9426395a3adcad74cdbc040f6d11f5b79195a7382ff860b81b63b26de3f30167139c73d2184b8f88000bb7af2903ba5ffc8c33c7c1606ba5ae8d2abd29abc33a6c9d50898ec239fa55889f27f5e9d8cd870596b4dc35fc70e9ef71e76e401db8230670babdeecf3412847622d9466e501001fd529a2cd0aaa83cae00de637e0c4c0733959eb219980080bf3279d22b6a28fe8cb7c0c06b2a9e1b152778b12d50b814d89a56f5bcb2390bacbd38dcfb3ead23bc42190804bf54d96eb71dbb48625"], 0x108}, 0x1, 0x0, 0x0, 0x20000085}, 0x841) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4f0000003be410e49592dc32000000000000e0ffffff62ac8e8daef1e650ba82f4cfbd4a4a07b2770f3a32a227810b96a0b19a0000000000006deff5001ef245d2508100"/78, @ANYRESHEX, @ANYBLOB="0764022890294d3eb32b03000000000000200012800b00c90067656e65766500001000028006000500030000000100000008000500", @ANYRESHEX, @ANYBLOB="08000a00fb7b11", @ANYRES32=r1, @ANYRES32], 0x50}}, 0x20008000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="609404002100000429bd7010ffdbdf250a80140600003556a1dc7940a8c96bf35169701700060a00010008000f001303000014000200fc0200000000000000000000000b82b80fd5bf5c39860f73306400000114000200fc02000000000001000000000000c023e20d04000000000000"], 0x60}}, 0x4002000) (async) lseek(0xffffffffffffffff, 0x4, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0xd0, 0x10, 0x401, 0x350, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3323}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0xd0}}, 0x0) (async) 12:19:15 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) (async) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) (async) 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 507.042276][ C0] sd 0:0:1:0: [sda] tag#381 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.052612][ C0] sd 0:0:1:0: [sda] tag#381 CDB: opcode=0xe5 (vendor) [ 507.059382][ C0] sd 0:0:1:0: [sda] tag#381 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 507.068879][ C0] sd 0:0:1:0: [sda] tag#381 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 507.078358][ C0] sd 0:0:1:0: [sda] tag#381 CDB[20]: ba 12:19:15 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000f8a3f5b5abb59aa52600000000660d81be93e852744ca38d008ae00000bf670000000000001510a1836a789d9d01070600000fff07ef7607000002000000070600000ee60000bf0500000000000000070700004c0000001f750000000000008d08497baeb0794b5dbf54220000000080070500000400f9ffad43010000000000958c5ec404a5a31a323aef1e49c98b25cb71d6b8c6bebbd3a88df0b5db72919db7dafc388580d67f37957e083ac00000000000000000000000e6ffffff00000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x80) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x1a, 0x3f, 0x2, 0x0, 0x2, 0x12000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7}, 0x8a0, 0xb5, 0x53, 0x6, 0x4, 0x9, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r0 = socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000ac06a1135700b31fbf9d3cbb23aac891c9c55228934de5f9dc431378d6ae35c5c5adcd01c637d8c6435e0e1c5befcc896e6f9816a94384936e614eb823be1ff26c34ade3f6e3ce9e0e20790b6d4066f3ec0c2eb59a4265a27ef996e1f0b300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x24008004) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400380000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="fe2d41aca759899cb993e09bb4f8d9426395a3adcad74cdbc040f6d11f5b79195a7382ff860b81b63b26de3f30167139c73d2184b8f88000bb7af2903ba5ffc8c33c7c1606ba5ae8d2abd29abc33a6c9d50898ec239fa55889f27f5e9d8cd870596b4dc35fc70e9ef71e76e401db8230670babdeecf3412847622d9466e501001fd529a2cd0aaa83cae00de637e0c4c0733959eb219980080bf3279d22b6a28fe8cb7c0c06b2a9e1b152778b12d50b814d89a56f5bcb2390bacbd38dcfb3ead23bc42190804bf54d96eb71dbb48625"], 0x108}, 0x1, 0x0, 0x0, 0x20000085}, 0x841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4f0000003be410e49592dc32000000000000e0ffffff62ac8e8daef1e650ba82f4cfbd4a4a07b2770f3a32a227810b96a0b19a0000000000006deff5001ef245d2508100"/78, @ANYRESHEX, @ANYBLOB="0764022890294d3eb32b03000000000000200012800b00c90067656e65766500001000028006000500030000000100000008000500", @ANYRESHEX, @ANYBLOB="08000a00fb7b11", @ANYRES32=r1, @ANYRES32], 0x50}}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="609404002100000429bd7010ffdbdf250a80140600003556a1dc7940a8c96bf35169701700060a00010008000f001303000014000200fc0200000000000000000000000b82b80fd5bf5c39860f73306400000114000200fc02000000000001000000000000c023e20d04000000000000"], 0x60}}, 0x4002000) lseek(0xffffffffffffffff, 0x4, 0x2) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0xd0, 0x10, 0x401, 0x350, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3323}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0xd0}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000f8a3f5b5abb59aa52600000000660d81be93e852744ca38d008ae00000bf670000000000001510a1836a789d9d01070600000fff07ef7607000002000000070600000ee60000bf0500000000000000070700004c0000001f750000000000008d08497baeb0794b5dbf54220000000080070500000400f9ffad43010000000000958c5ec404a5a31a323aef1e49c98b25cb71d6b8c6bebbd3a88df0b5db72919db7dafc388580d67f37957e083ac00000000000000000000000e6ffffff00000000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x1a, 0x3f, 0x2, 0x0, 0x2, 0x12000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7}, 0x8a0, 0xb5, 0x53, 0x6, 0x4, 0x9, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x8) (async) socket(0x0, 0x803, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000ac06a1135700b31fbf9d3cbb23aac891c9c55228934de5f9dc431378d6ae35c5c5adcd01c637d8c6435e0e1c5befcc896e6f9816a94384936e614eb823be1ff26c34ade3f6e3ce9e0e20790b6d4066f3ec0c2eb59a4265a27ef996e1f0b300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x24008004) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400380000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="fe2d41aca759899cb993e09bb4f8d9426395a3adcad74cdbc040f6d11f5b79195a7382ff860b81b63b26de3f30167139c73d2184b8f88000bb7af2903ba5ffc8c33c7c1606ba5ae8d2abd29abc33a6c9d50898ec239fa55889f27f5e9d8cd870596b4dc35fc70e9ef71e76e401db8230670babdeecf3412847622d9466e501001fd529a2cd0aaa83cae00de637e0c4c0733959eb219980080bf3279d22b6a28fe8cb7c0c06b2a9e1b152778b12d50b814d89a56f5bcb2390bacbd38dcfb3ead23bc42190804bf54d96eb71dbb48625"], 0x108}, 0x1, 0x0, 0x0, 0x20000085}, 0x841) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4f0000003be410e49592dc32000000000000e0ffffff62ac8e8daef1e650ba82f4cfbd4a4a07b2770f3a32a227810b96a0b19a0000000000006deff5001ef245d2508100"/78, @ANYRESHEX, @ANYBLOB="0764022890294d3eb32b03000000000000200012800b00c90067656e65766500001000028006000500030000000100000008000500", @ANYRESHEX, @ANYBLOB="08000a00fb7b11", @ANYRES32=r1, @ANYRES32], 0x50}}, 0x20008000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="609404002100000429bd7010ffdbdf250a80140600003556a1dc7940a8c96bf35169701700060a00010008000f001303000014000200fc0200000000000000000000000b82b80fd5bf5c39860f73306400000114000200fc02000000000001000000000000c023e20d04000000000000"], 0x60}}, 0x4002000) (async) lseek(0xffffffffffffffff, 0x4, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0xd0, 0x10, 0x401, 0x350, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3323}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_AF_SPEC={0x7c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0xd0}}, 0x0) (async) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x5421, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:16 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) 12:19:16 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0xec, 0x3, 0xffff, 0x7, 0x8, 'syz1\x00', "562626369da0db04c66e5ba06926f9e2a6772feebdb00f719e98347ec4011392", "35e3f5aac3435bc4f4d478efc9e03611b6bb7edc6f602a8db2326d5e68ba2d15", [{0xa3c, 0x1, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0xffffffff}}, {0x5, 0x400, {0x0, 0x8001}}, {0x1, 0x101, {0x1, 0x8c}}, {0x80, 0x0, {0x1, 0x4ac9}}, {0x0, 0x0, {0x2, 0x2}}, {0x6, 0x42, {0x1, 0x6d019c93}}, {0x0, 0x142, {0x1, 0x10001}}, {0xffff, 0x81, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0x8}}, {0x5c38, 0x100, {0x0, 0x905}}, {0x1f, 0x3, {0x1, 0xae}}, {0x0, 0x5a4, {0x3, 0xc27}}, {0xfffc, 0x6, {0x3, 0x3}}, {0x1, 0x4, {0x0, 0x5}}, {0x6, 0xa53, {0x1, 0x9}}, {0x20, 0x2, {0x2, 0x1cfce81}}, {0x1, 0x7f, {0x0, 0x1}}, {0x2, 0x7ff, {0x3, 0x9}}, {0x3ff, 0x9c, {0x1, 0x2}}, {0x3, 0x1, {0x0, 0x81}}, {0x0, 0x5, {0x1, 0xff}}, {0x618, 0x1, {0x0, 0x9}}, {0x7, 0x9, {0xe801a0123946a4d2, 0x1}}, {0xf06, 0x9, {0x2, 0x7f}}, {0xc2c, 0x2, {0x2, 0x9}}, {0xc9, 0xf8, {0x3, 0x10001}}, {0x7, 0x5ef, {0x5528faf3999d173f, 0xb8eb}}, {0x86, 0x7d36, {0x2, 0x7}}, {0x4000, 0x400, {0x1, 0x3e}}, {0x3, 0x1ff, {0x1, 0x9}}, {0x6, 0x200, {0x1, 0x800}}, {0x13a6, 0x7f, {0x0, 0x5}}, {0x1ff, 0x1, {0x0, 0xff}}, {0x8, 0x8, {0x1, 0x7fffffff}}, {}, {0x1f, 0x1f, {0x1, 0x7}}, {0x1, 0xff, {0x3, 0x10000}}, {0xffff, 0x0, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x3, 0x7, 0x8, 0x23, 'syz0\x00', "dbbe8ca626ca784553d6fa69f89cabad78d873b9c69f4dd7d59e9e7fd2ec67df", "0a4cf5fe0bfbf5655a2e95d321d97373b4ce348909518a44bf5e42e020efc407", [{0x2, 0x7fff, {0x0, 0x100}}, {0x9, 0x8, {0x1, 0x7fff}}, {0x1, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x0, 0x1}}, {0x3ff, 0x823, {0x2, 0x400}}, {0x1, 0xc9f6, {0x0, 0xfffffe02}}, {0x4, 0x1, {0x3, 0xfec9}}, {0xe5}, {0x0, 0x4, {0x0, 0xb04}}, {0x3, 0x40, {0x2, 0xffffffff}}, {0x0, 0x1, {0x2, 0x1f}}, {0x1, 0xcb, {0x3, 0x5}}, {0x1, 0x7ff, {0x1, 0x3ff}}, {0x9c45, 0xfb18, {0x1, 0x3f}}, {0x1, 0x471f, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x9d5, 0x9, {0x3, 0x7}}, {0x217, 0x0, {0x1, 0x9}}, {0x80, 0x7ff, {0x0, 0x8}}, {0x7, 0x3, {0x2, 0xffffff81}}, {0x4, 0xee, {0x0, 0x5}}, {0x40, 0x327, {0x3, 0x80}}, {0x7f, 0x2, {0x0, 0x79ee}}, {0x7, 0x7f0, {0x2, 0x3f}}, {0x6, 0x3f, {0x3, 0x1}}, {0x3, 0x0, {0x3, 0x3}}, {0x81, 0x2, {0x0, 0x5}}, {0x80, 0x7ff, {0x0, 0x3f}}, {0x6, 0x400, {0x0, 0xd194}}, {0x0, 0x5, {0x3, 0x4}}, {0xfff9, 0x7, {0x0, 0x1}}, {0x1ff, 0x40, {0x3, 0x2}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x8, 0x2, {0x2, 0xffffffff}}, {0xffc0, 0x2, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x5}}, {0x5, 0x800, {0x2, 0x8}}, {0xa8e3, 0x7, {0x3, 0x44}}, {0x0, 0x100, {0x0, 0x1}}, {0x9, 0xf800, {0x2, 0xf83}}]}}}, {{0x254, 0x1, {{0x2, 0x80}, 0x5, 0x81, 0x0, 0x60, 0xb, 'syz1\x00', "8862ec3b6c4c4c318d5fe6965c214f81dfb37dba8fd761ff37345f862a41805f", "0a1d1da4ea6a1fdf7e990436fdb60b4dd5870d9327af2c8654a895ffdc1f2c28", [{0xf0f0, 0x8, {0x1, 0x8001}}, {0x6, 0x80, {0x3, 0x7ff}}, {0x401, 0x4, {0x1, 0x3f}}, {0x5, 0x3b, {0x0, 0x1ff}}, {0x401, 0x8000, {0x1, 0x4}}, {0x7, 0xf542, {0x2, 0xfffffffe}}, {0x5, 0x721, {0x2, 0x2}}, {0x89, 0x7f, {0x3, 0x81}}, {0x9, 0xb22, {0x3, 0x800}}, {0x800, 0x0, {0x2, 0x9}}, {0x400, 0x81b, {0x1, 0x8}}, {0x1, 0x9a3, {0x2, 0x80000001}}, {0x0, 0x6, {0x0, 0x7}}, {0x1000, 0x100, {0x3, 0xfffff4c5}}, {0xf9, 0x16, {0x2, 0x2}}, {0x6, 0x0, {0x0, 0xfffff801}}, {0x9, 0x1f, {0x2, 0x5}}, {0x8, 0xba00, {0x3, 0x4}}, {0x0, 0x2, {0x3, 0x7}}, {0xaeb3, 0x81c, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x7}}, {0x4, 0x4, {0x2, 0x8}}, {0x101, 0xff47, {0x3}}, {0x4, 0x400, {0x3, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x7331, 0x7f, {0x0, 0x7}}, {0x7, 0x800, {0x2, 0x2}}, {0x81, 0x1ff, {0x1, 0x1}}, {0x8, 0x7, {0x2, 0x8}}, {0xbc7, 0x3, {0x3, 0xfff}}, {0x80, 0x6, {0x3, 0x9}}, {0x1000, 0x3e, {0x2, 0x3f}}, {0xd5, 0xfc00, {0x3, 0xffff}}, {0x200, 0x4, {0x3, 0x60}}, {0x9, 0xca3e, {0x2, 0x3}}, {0x7f, 0x9, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0x7f}}, {0xc6, 0x8, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) (async) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000f00)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000e80)="2989985f990f1406eb4448cdc1c3b9cb7266c4cedc9a2c11761d1fc9df92934df56acf0cad45daf16d9f2a4b01d80ddf3e", 0x3e, 0x0, &(0x7f0000000ec0)="7964ddc36940b52eb6ac467cbf1956f12d44670776e2788910a171a4df3a7c0b38dddad02d03e2c03f0dc9b154ce36e79e435d1eb3031c29ffc00d2fde3f"}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffe, 0x48, 0x4, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000300)=""/28, 0x1c}]}, &(0x7f0000000500)="df0a6cb8b7e83b3c2b2b1e55ba6ec784a8d4d901b2858697a677a6f9a29a34ef288bda3bcfbac0add862b1401689a0aa52713ba76214b6c694bede5f85af5dcd534047ae1fbadcab", &(0x7f0000000580)=""/25, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)}) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x8, 0x4, [0x9, 0x9, 0xfffd, 0x2]}, &(0x7f00000006c0)=0x10) (async) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x5450, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000001740)=""/237, 0xed}], 0x6, &(0x7f00000018c0)=""/148, 0x94}, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 507.803708][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 507.803742][ C1] sd 0:0:1:0: [sda] tag#355 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.820646][ C1] sd 0:0:1:0: [sda] tag#355 CDB: opcode=0xe5 (vendor) [ 507.827442][ C1] sd 0:0:1:0: [sda] tag#355 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 507.836947][ C1] sd 0:0:1:0: [sda] tag#355 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 507.846463][ C1] sd 0:0:1:0: [sda] tag#355 CDB[20]: ba 12:19:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x5451, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:17 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000001740)=""/237, 0xed}], 0x6, &(0x7f00000018c0)=""/148, 0x94}, 0x3) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300), 0x4) (async) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) tkill(r0, 0x1000000000016) 12:19:17 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x88, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x5452, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x253, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:17 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x5460, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 508.509366][ C1] sd 0:0:1:0: [sda] tag#373 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.519680][ C1] sd 0:0:1:0: [sda] tag#373 CDB: opcode=0xe5 (vendor) [ 508.526472][ C1] sd 0:0:1:0: [sda] tag#373 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 508.535951][ C1] sd 0:0:1:0: [sda] tag#373 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 508.545431][ C1] sd 0:0:1:0: [sda] tag#373 CDB[20]: ba 12:19:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:17 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) (async) r0 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000001740)=""/237, 0xed}], 0x6, &(0x7f00000018c0)=""/148, 0x94}, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300), 0x4) (async) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) (async) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 12:19:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8910, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:18 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x6}}, './bus\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x3f, 0x0, 0xff, 0x0, 0x80000001, 0x41000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x1d101, 0x2, 0x3, 0x1, 0x6, 0x0, 0x4, 0x0, 0x6048, 0x0, 0x3f}, r4, 0x4, 0xffffffffffffffff, 0x1) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 509.336936][ C1] sd 0:0:1:0: [sda] tag#324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.347240][ C1] sd 0:0:1:0: [sda] tag#324 CDB: opcode=0xe5 (vendor) [ 509.354041][ C1] sd 0:0:1:0: [sda] tag#324 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 509.363528][ C1] sd 0:0:1:0: [sda] tag#324 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 509.373039][ C1] sd 0:0:1:0: [sda] tag#324 CDB[20]: ba 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:18 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x6}}, './bus\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x3f, 0x0, 0xff, 0x0, 0x80000001, 0x41000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x1d101, 0x2, 0x3, 0x1, 0x6, 0x0, 0x4, 0x0, 0x6048, 0x0, 0x3f}, r4, 0x4, 0xffffffffffffffff, 0x1) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)) (async) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x6}}, './bus\x00'}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x3f, 0x0, 0xff, 0x0, 0x80000001, 0x41000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x1d101, 0x2, 0x3, 0x1, 0x6, 0x0, 0x4, 0x0, 0x6048, 0x0, 0x3f}, r4, 0x4, 0xffffffffffffffff, 0x1) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8911, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 509.459865][ C1] sd 0:0:1:0: [sda] tag#339 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.470208][ C1] sd 0:0:1:0: [sda] tag#339 CDB: opcode=0xe5 (vendor) [ 509.477077][ C1] sd 0:0:1:0: [sda] tag#339 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 509.486587][ C1] sd 0:0:1:0: [sda] tag#339 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 509.496075][ C1] sd 0:0:1:0: [sda] tag#339 CDB[20]: ba 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 509.557903][ C0] sd 0:0:1:0: [sda] tag#343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.568256][ C0] sd 0:0:1:0: [sda] tag#343 CDB: opcode=0xe5 (vendor) [ 509.575068][ C0] sd 0:0:1:0: [sda] tag#343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 509.584570][ C0] sd 0:0:1:0: [sda] tag#343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 509.594076][ C0] sd 0:0:1:0: [sda] tag#343 CDB[20]: ba 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4400, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8913, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x6}}, './bus\x00'}) (rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x3f, 0x0, 0xff, 0x0, 0x80000001, 0x41000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x1d101, 0x2, 0x3, 0x1, 0x6, 0x0, 0x4, 0x0, 0x6048, 0x0, 0x3f}, r4, 0x4, 0xffffffffffffffff, 0x1) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:18 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 510.189752][ C0] sd 0:0:1:0: [sda] tag#363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.200086][ C0] sd 0:0:1:0: [sda] tag#363 CDB: opcode=0xe5 (vendor) [ 510.206885][ C0] sd 0:0:1:0: [sda] tag#363 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 510.216382][ C0] sd 0:0:1:0: [sda] tag#363 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 510.225889][ C0] sd 0:0:1:0: [sda] tag#363 CDB[20]: ba 12:19:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5302, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8800, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) [ 510.319176][T14101] bridge0: port 3(veth0_to_bond) entered disabled state [ 510.326838][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.334599][T14101] bridge0: port 1(bridge_slave_0) entered disabled state 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xff01, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x891d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x891e, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x891f, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8920, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 1) [ 512.234799][T14162] FAULT_INJECTION: forcing a failure. [ 512.234799][T14162] name failslab, interval 1, probability 0, space 0, times 0 [ 512.247564][T14162] CPU: 1 PID: 14162 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 512.255991][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.267351][T14162] Call Trace: [ 512.270635][T14162] [ 512.273578][T14162] dump_stack_lvl+0xd6/0x122 [ 512.278188][T14162] dump_stack+0x11/0x1b [ 512.282354][T14162] should_fail+0x23c/0x250 [ 512.286858][T14162] ? alloc_pipe_info+0xac/0x350 [ 512.291768][T14162] __should_failslab+0x81/0x90 [ 512.296549][T14162] should_failslab+0x5/0x20 [ 512.301233][T14162] kmem_cache_alloc_trace+0x52/0x350 [ 512.306597][T14162] ? file_has_perm+0x34d/0x390 [ 512.311371][T14162] alloc_pipe_info+0xac/0x350 [ 512.316113][T14162] splice_direct_to_actor+0x5f7/0x650 [ 512.321538][T14162] ? security_file_permission+0x7c/0xa0 [ 512.327243][T14162] ? do_splice_direct+0x190/0x190 [ 512.332286][T14162] ? security_file_permission+0x87/0xa0 [ 512.337851][T14162] do_splice_direct+0x106/0x190 [ 512.342772][T14162] do_sendfile+0x675/0xc40 [ 512.347203][T14162] __x64_sys_sendfile64+0x102/0x140 [ 512.352409][T14162] do_syscall_64+0x44/0xd0 [ 512.356835][T14162] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.362741][T14162] RIP: 0033:0x7f44610ccfe9 [ 512.367235][T14162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.386851][T14162] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 512.395274][T14162] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 512.403313][T14162] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 512.411343][T14162] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.419324][T14162] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 512.427308][T14162] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 512.435297][T14162] 12:19:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8921, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 2) 12:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 513.017812][T14174] FAULT_INJECTION: forcing a failure. [ 513.017812][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 513.030484][T14174] CPU: 1 PID: 14174 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 513.038912][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.048980][T14174] Call Trace: [ 513.052272][T14174] [ 513.055210][T14174] dump_stack_lvl+0xd6/0x122 [ 513.059825][T14174] dump_stack+0x11/0x1b [ 513.064000][T14174] should_fail+0x23c/0x250 [ 513.068429][T14174] ? kcalloc+0x32/0x40 [ 513.072503][T14174] __should_failslab+0x81/0x90 [ 513.077279][T14174] should_failslab+0x5/0x20 [ 513.081797][T14174] __kmalloc+0x6f/0x370 [ 513.085967][T14174] ? kmem_cache_alloc_trace+0x24b/0x350 [ 513.091530][T14174] kcalloc+0x32/0x40 [ 513.095430][T14174] alloc_pipe_info+0x1be/0x350 [ 513.100207][T14174] splice_direct_to_actor+0x5f7/0x650 [ 513.105592][T14174] ? security_file_permission+0x7c/0xa0 [ 513.111156][T14174] ? do_splice_direct+0x190/0x190 [ 513.116211][T14174] ? security_file_permission+0x87/0xa0 [ 513.121828][T14174] do_splice_direct+0x106/0x190 [ 513.126774][T14174] do_sendfile+0x675/0xc40 [ 513.131216][T14174] __x64_sys_sendfile64+0x102/0x140 [ 513.136483][T14174] do_syscall_64+0x44/0xd0 [ 513.140945][T14174] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.146848][T14174] RIP: 0033:0x7f44610ccfe9 12:19:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 513.151275][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.170968][T14174] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 513.179415][T14174] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 513.187390][T14174] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 513.195367][T14174] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 513.203390][T14174] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x14000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 513.211371][T14174] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 513.219394][T14174] 12:19:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8922, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x44000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:22 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000100)=0xb53) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x7a, @buffer={0x0, 0x3d, &(0x7f0000000040)=""/61}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bd00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ac487e646ec625"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x3, "1a7bd7350c8f64"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004cd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "1132f893fa5ce1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}, {0x0, r9}, {0x0, r10}], 0x6, "736317e7aa314c"}) [ 513.313325][T14186] bridge0: mtu greater than device maximum 12:19:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 3) 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8923, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:22 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000100)=0xb53) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x7a, @buffer={0x0, 0x3d, &(0x7f0000000040)=""/61}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) fallocate(r1, 0x0, 0x100000006, 0x40000006) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bd00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ac487e646ec625"}) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x3, "1a7bd7350c8f64"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004cd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "1132f893fa5ce1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}, {0x0, r9}, {0x0, r10}], 0x6, "736317e7aa314c"}) [ 513.672534][T14195] FAULT_INJECTION: forcing a failure. [ 513.672534][T14195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 513.685853][T14195] CPU: 0 PID: 14195 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 513.694278][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.704341][T14195] Call Trace: [ 513.707623][T14195] [ 513.710634][T14195] dump_stack_lvl+0xd6/0x122 [ 513.715289][T14195] dump_stack+0x11/0x1b [ 513.719514][T14195] should_fail+0x23c/0x250 [ 513.723939][T14195] __alloc_pages+0x102/0x330 [ 513.728538][T14195] alloc_pages+0x316/0x420 [ 513.732958][T14195] folio_alloc+0x1a/0x20 [ 513.737208][T14195] filemap_alloc_folio+0x53/0xf0 [ 513.742195][T14195] page_cache_ra_unbounded+0x1c0/0x400 [ 513.747671][T14195] ondemand_readahead+0x4f8/0x700 [ 513.752742][T14195] page_cache_sync_ra+0xaf/0xe0 [ 513.757614][T14195] filemap_read+0x3ed/0x1430 [ 513.762234][T14195] generic_file_read_iter+0x72/0x320 [ 513.767537][T14195] ? iov_iter_pipe+0x100/0x150 [ 513.772390][T14195] ? ext4_file_read_iter+0x7a/0x1f0 [ 513.777633][T14195] generic_file_splice_read+0x24f/0x330 [ 513.783196][T14195] ? splice_shrink_spd+0x60/0x60 [ 513.788170][T14195] splice_direct_to_actor+0x2aa/0x650 [ 513.793558][T14195] ? do_splice_direct+0x190/0x190 [ 513.798602][T14195] do_splice_direct+0x106/0x190 [ 513.803549][T14195] do_sendfile+0x675/0xc40 [ 513.807974][T14195] __x64_sys_sendfile64+0x102/0x140 [ 513.813185][T14195] do_syscall_64+0x44/0xd0 [ 513.817611][T14195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.823521][T14195] RIP: 0033:0x7f44610ccfe9 [ 513.827942][T14195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.847550][T14195] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 513.855970][T14195] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 513.864094][T14195] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x53020000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:22 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000100)=0xb53) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x7a, @buffer={0x0, 0x3d, &(0x7f0000000040)=""/61}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bd00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ac487e646ec625"}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x3, "1a7bd7350c8f64"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004cd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "1132f893fa5ce1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dd00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}, {0x0, r9}, {0x0, r10}], 0x6, "736317e7aa314c"}) [ 513.872074][T14195] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 513.880056][T14195] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 513.888070][T14195] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 513.896098][T14195] [ 513.913468][T14200] @: renamed from bridge0 12:19:22 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) timer_create(0x5, &(0x7f0000000140)={0x0, 0x14, 0x4, @thr={&(0x7f0000000040)="e5d43664d80b368025eb4b61a018b8d6", &(0x7f00000000c0)="d9d7022e3fa466cfe852f3025bb92f1ecf7ceef3ab7ce872f54791e75f9687049fed2a1473"}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000001340)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="4ebe23a378064c8f99f74b299391590dbbfb9e223de42071ce589ce22b97fb2217cc544197dc8f0dfcb74c91f8a93f733f8146a69d19a00ae7224706bc3dfe1176fa4f21d84c46e2eb1ce97c3441aae4eb706dc09da117229d87a19fce409407246e2199dfcd82d50b04558ebb553ada0ab6566c93356e07817d7af429adac14ab077e7fd3683785bcdf66171b037966fd4ffb09731c113e449a1313ddbf0d26892120033c4f0dede1347f64baffe8264efb9a047780578dcdfc0691edd773b45f576e93b2093f9f0a53913e1e482ea42d2e50ca1e531fa0bc91779e254d8de0c71bfaf1e414aa0a74671a8776f5691d2ca70c63a64d24"}}, &(0x7f0000001380)=0x0) timer_settime(r1, 0x0, &(0x7f00000013c0), &(0x7f0000001400)) 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:22 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8924, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x88000000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 514.134264][ C1] sd 0:0:1:0: [sda] tag#322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 514.144568][ C1] sd 0:0:1:0: [sda] tag#322 CDB: opcode=0xe5 (vendor) [ 514.151374][ C1] sd 0:0:1:0: [sda] tag#322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 514.160832][ C1] sd 0:0:1:0: [sda] tag#322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 514.170329][ C1] sd 0:0:1:0: [sda] tag#322 CDB[20]: ba 12:19:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 4) 12:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:23 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) timer_create(0x5, &(0x7f0000000140)={0x0, 0x14, 0x4, @thr={&(0x7f0000000040)="e5d43664d80b368025eb4b61a018b8d6", &(0x7f00000000c0)="d9d7022e3fa466cfe852f3025bb92f1ecf7ceef3ab7ce872f54791e75f9687049fed2a1473"}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000001340)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="4ebe23a378064c8f99f74b299391590dbbfb9e223de42071ce589ce22b97fb2217cc544197dc8f0dfcb74c91f8a93f733f8146a69d19a00ae7224706bc3dfe1176fa4f21d84c46e2eb1ce97c3441aae4eb706dc09da117229d87a19fce409407246e2199dfcd82d50b04558ebb553ada0ab6566c93356e07817d7af429adac14ab077e7fd3683785bcdf66171b037966fd4ffb09731c113e449a1313ddbf0d26892120033c4f0dede1347f64baffe8264efb9a047780578dcdfc0691edd773b45f576e93b2093f9f0a53913e1e482ea42d2e50ca1e531fa0bc91779e254d8de0c71bfaf1e414aa0a74671a8776f5691d2ca70c63a64d24"}}, &(0x7f0000001380)=0x0) timer_settime(r1, 0x0, &(0x7f00000013c0), &(0x7f0000001400)) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) gettid() (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) (async) timer_create(0x5, &(0x7f0000000140)={0x0, 0x14, 0x4, @thr={&(0x7f0000000040)="e5d43664d80b368025eb4b61a018b8d6", &(0x7f00000000c0)="d9d7022e3fa466cfe852f3025bb92f1ecf7ceef3ab7ce872f54791e75f9687049fed2a1473"}}, &(0x7f00000001c0)) (async) timer_create(0x0, &(0x7f0000001340)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="4ebe23a378064c8f99f74b299391590dbbfb9e223de42071ce589ce22b97fb2217cc544197dc8f0dfcb74c91f8a93f733f8146a69d19a00ae7224706bc3dfe1176fa4f21d84c46e2eb1ce97c3441aae4eb706dc09da117229d87a19fce409407246e2199dfcd82d50b04558ebb553ada0ab6566c93356e07817d7af429adac14ab077e7fd3683785bcdf66171b037966fd4ffb09731c113e449a1313ddbf0d26892120033c4f0dede1347f64baffe8264efb9a047780578dcdfc0691edd773b45f576e93b2093f9f0a53913e1e482ea42d2e50ca1e531fa0bc91779e254d8de0c71bfaf1e414aa0a74671a8776f5691d2ca70c63a64d24"}}, &(0x7f0000001380)) (async) timer_settime(r1, 0x0, &(0x7f00000013c0), &(0x7f0000001400)) (async) [ 514.407729][T14238] FAULT_INJECTION: forcing a failure. [ 514.407729][T14238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.421043][T14238] CPU: 0 PID: 14238 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 514.429468][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.439530][T14238] Call Trace: [ 514.442817][T14238] [ 514.445747][T14238] dump_stack_lvl+0xd6/0x122 [ 514.450417][T14238] dump_stack+0x11/0x1b [ 514.454576][T14238] should_fail+0x23c/0x250 [ 514.459021][T14238] __alloc_pages+0x102/0x330 [ 514.463612][T14238] alloc_pages+0x316/0x420 [ 514.468090][T14238] folio_alloc+0x1a/0x20 [ 514.472379][T14238] filemap_alloc_folio+0x53/0xf0 [ 514.477324][T14238] page_cache_ra_unbounded+0x1c0/0x400 [ 514.482792][T14238] ondemand_readahead+0x4f8/0x700 [ 514.487868][T14238] page_cache_sync_ra+0xaf/0xe0 [ 514.492734][T14238] filemap_read+0x3ed/0x1430 [ 514.497377][T14238] generic_file_read_iter+0x72/0x320 [ 514.502701][T14238] ? iov_iter_pipe+0x100/0x150 [ 514.507487][T14238] ? ext4_file_read_iter+0x7a/0x1f0 [ 514.512711][T14238] generic_file_splice_read+0x24f/0x330 [ 514.518265][T14238] ? splice_shrink_spd+0x60/0x60 [ 514.523217][T14238] splice_direct_to_actor+0x2aa/0x650 [ 514.528635][T14238] ? do_splice_direct+0x190/0x190 [ 514.533670][T14238] do_splice_direct+0x106/0x190 [ 514.538583][T14238] do_sendfile+0x675/0xc40 [ 514.543018][T14238] __x64_sys_sendfile64+0x102/0x140 [ 514.548225][T14238] do_syscall_64+0x44/0xd0 [ 514.552646][T14238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.558617][T14238] RIP: 0033:0x7f44610ccfe9 [ 514.563042][T14238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.582689][T14238] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 514.591206][T14238] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 514.599251][T14238] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 514.607229][T14238] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 514.615201][T14238] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 514.623200][T14238] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 514.631222][T14238] 12:19:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:23 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8927, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:23 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xefffffff, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:23 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) r0 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) timer_create(0x5, &(0x7f0000000140)={0x0, 0x14, 0x4, @thr={&(0x7f0000000040)="e5d43664d80b368025eb4b61a018b8d6", &(0x7f00000000c0)="d9d7022e3fa466cfe852f3025bb92f1ecf7ceef3ab7ce872f54791e75f9687049fed2a1473"}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000001340)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000340)="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", &(0x7f0000000200)="4ebe23a378064c8f99f74b299391590dbbfb9e223de42071ce589ce22b97fb2217cc544197dc8f0dfcb74c91f8a93f733f8146a69d19a00ae7224706bc3dfe1176fa4f21d84c46e2eb1ce97c3441aae4eb706dc09da117229d87a19fce409407246e2199dfcd82d50b04558ebb553ada0ab6566c93356e07817d7af429adac14ab077e7fd3683785bcdf66171b037966fd4ffb09731c113e449a1313ddbf0d26892120033c4f0dede1347f64baffe8264efb9a047780578dcdfc0691edd773b45f576e93b2093f9f0a53913e1e482ea42d2e50ca1e531fa0bc91779e254d8de0c71bfaf1e414aa0a74671a8776f5691d2ca70c63a64d24"}}, &(0x7f0000001380)=0x0) timer_settime(r1, 0x0, &(0x7f00000013c0), &(0x7f0000001400)) 12:19:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001c00020008000c000000000008000400000000000800060000000000"], 0x4c}}, 0x0) 12:19:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001c00020008000c000000000008000400000000000800060000000000"], 0x4c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001c00020008000c000000000008000400000000000800060000000000"], 0x4c}}, 0x0) (async) 12:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5ffffff, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 514.802324][ C1] sd 0:0:1:0: [sda] tag#337 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 514.812641][ C1] sd 0:0:1:0: [sda] tag#337 CDB: opcode=0xe5 (vendor) [ 514.819435][ C1] sd 0:0:1:0: [sda] tag#337 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 514.828931][ C1] sd 0:0:1:0: [sda] tag#337 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 514.838445][ C1] sd 0:0:1:0: [sda] tag#337 CDB[20]: ba 12:19:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001c00020008000c000000000008000400000000000800060000000000"], 0x4c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000001c00020008000c000000000008000400000000000800060000000000"], 0x4c}}, 0x0) (async) 12:19:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 5) 12:19:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xff010000, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 515.025169][T14285] FAULT_INJECTION: forcing a failure. [ 515.025169][T14285] name failslab, interval 1, probability 0, space 0, times 0 [ 515.037871][T14285] CPU: 0 PID: 14285 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 515.046298][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.056374][T14285] Call Trace: [ 515.059652][T14285] [ 515.062625][T14285] dump_stack_lvl+0xd6/0x122 [ 515.067234][T14285] dump_stack+0x11/0x1b [ 515.071400][T14285] should_fail+0x23c/0x250 [ 515.075830][T14285] ? xas_create+0x3fb/0xb10 [ 515.080351][T14285] __should_failslab+0x81/0x90 [ 515.085164][T14285] should_failslab+0x5/0x20 [ 515.089679][T14285] kmem_cache_alloc+0x4f/0x320 [ 515.094521][T14285] xas_create+0x3fb/0xb10 [ 515.098894][T14285] xas_store+0x70/0xca0 [ 515.103061][T14285] ? xas_find_conflict+0x422/0x4c0 [ 515.108182][T14285] __filemap_add_folio+0x1e8/0x4d0 [ 515.113350][T14285] ? workingset_activation+0x2b0/0x2b0 [ 515.118874][T14285] filemap_add_folio+0x6b/0x150 [ 515.123855][T14285] page_cache_ra_unbounded+0x274/0x400 [ 515.129413][T14285] ondemand_readahead+0x4f8/0x700 [ 515.134498][T14285] page_cache_sync_ra+0xaf/0xe0 [ 515.139428][T14285] filemap_read+0x3ed/0x1430 [ 515.144137][T14285] generic_file_read_iter+0x72/0x320 [ 515.149434][T14285] ? iov_iter_pipe+0x100/0x150 [ 515.154204][T14285] ? ext4_file_read_iter+0x7a/0x1f0 [ 515.159411][T14285] generic_file_splice_read+0x24f/0x330 [ 515.165004][T14285] ? splice_shrink_spd+0x60/0x60 [ 515.170005][T14285] splice_direct_to_actor+0x2aa/0x650 [ 515.175536][T14285] ? do_splice_direct+0x190/0x190 [ 515.180652][T14285] do_splice_direct+0x106/0x190 [ 515.185598][T14285] do_sendfile+0x675/0xc40 [ 515.190097][T14285] __x64_sys_sendfile64+0x102/0x140 [ 515.195323][T14285] do_syscall_64+0x44/0xd0 [ 515.199821][T14285] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.205739][T14285] RIP: 0033:0x7f44610ccfe9 [ 515.210151][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.229758][T14285] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 515.238184][T14285] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 515.246161][T14285] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 515.254136][T14285] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 515.262116][T14285] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 515.270095][T14285] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 515.278084][T14285] 12:19:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:24 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000340)={0x0, 0xfb, 0xe02, 0x0, 0x0, "3f4afada783770d47412d4d1ae87e26c", "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"}, 0xe02, 0x0) 12:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:24 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8929, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:24 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:24 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 6) 12:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:24 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000340)={0x0, 0xfb, 0xe02, 0x0, 0x0, "3f4afada783770d47412d4d1ae87e26c", "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"}, 0xe02, 0x0) [ 515.605522][T14295] FAULT_INJECTION: forcing a failure. [ 515.605522][T14295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.618835][T14295] CPU: 0 PID: 14295 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 515.627255][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.637328][T14295] Call Trace: [ 515.640612][T14295] [ 515.643552][T14295] dump_stack_lvl+0xd6/0x122 [ 515.648158][T14295] dump_stack+0x11/0x1b [ 515.652323][T14295] should_fail+0x23c/0x250 [ 515.656752][T14295] __alloc_pages+0x102/0x330 [ 515.661365][T14295] alloc_pages+0x316/0x420 [ 515.665789][T14295] folio_alloc+0x1a/0x20 [ 515.670115][T14295] filemap_alloc_folio+0x53/0xf0 [ 515.675069][T14295] page_cache_ra_unbounded+0x1c0/0x400 [ 515.680647][T14295] ondemand_readahead+0x4f8/0x700 [ 515.685679][T14295] page_cache_sync_ra+0xaf/0xe0 [ 515.690560][T14295] filemap_read+0x3ed/0x1430 [ 515.695186][T14295] generic_file_read_iter+0x72/0x320 [ 515.700561][T14295] ? iov_iter_pipe+0x100/0x150 [ 515.705347][T14295] ? ext4_file_read_iter+0x7a/0x1f0 [ 515.709238][ C1] sd 0:0:1:0: [sda] tag#352 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 515.710567][T14295] generic_file_splice_read+0x24f/0x330 [ 515.710599][T14295] ? splice_shrink_spd+0x60/0x60 [ 515.720873][ C1] sd 0:0:1:0: [sda] tag#352 CDB: opcode=0xe5 (vendor) [ 515.726370][T14295] splice_direct_to_actor+0x2aa/0x650 [ 515.731349][ C1] sd 0:0:1:0: [sda] tag#352 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 515.738055][T14295] ? do_splice_direct+0x190/0x190 [ 515.743429][ C1] sd 0:0:1:0: [sda] tag#352 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 515.752835][T14295] do_splice_direct+0x106/0x190 [ 515.757869][ C1] sd 0:0:1:0: [sda] tag#352 CDB[20]: ba [ 515.767282][T14295] do_sendfile+0x675/0xc40 [ 515.782059][T14295] __x64_sys_sendfile64+0x102/0x140 [ 515.787331][T14295] do_syscall_64+0x44/0xd0 [ 515.791815][T14295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.797804][T14295] RIP: 0033:0x7f44610ccfe9 [ 515.802222][T14295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.823312][T14295] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 515.831769][T14295] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 515.839751][T14295] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 515.847736][T14295] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 12:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 515.855830][T14295] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 515.863812][T14295] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 515.871795][T14295] 12:19:24 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000340)={0x0, 0xfb, 0xe02, 0x0, 0x0, "3f4afada783770d47412d4d1ae87e26c", "7be9cccd57459a7001437d8c753791d4ac29341ed72406d3f334daf2a5663840efa4111bf0fdc67daea2dcd449da0c4dc646c16c09b5643d1df7dda0f98404e2495c355a493f50699cd8e064e3e2c6297ac516b486802fc9bf28cea4e94e5168ff344ec9edf235dd79ca690919f995840b055a1556cf658bb6799b48a58debb02f272d807b23ff1afcab3d75b14a3cb9b7b36ba10570fde775438783d923af11d86eeea04b5ad345311e6f41f0c716daed330af32c87b61a89b44a068c5a623b12916baff594b8157704f558ba901aaa27b95d94997cd6304526324b44a89825206fdff76520b0c4bc9414caf3092aaabf31a4ffaebacc6d1325139cbf73c9e4e41598ce13edd9ee0de784e7d19ab6f5b710d8ad9dc9204f1aa59e62e2bf55fac06f81a49a34812c0ca561046db8fd0a85403c91fba05064dda39e4f5beeb6983bc1f954e5c93552da6ba6e3eb5e3f301b0b9e6b512d86975400fc38606f974f281db0bbedfb10804f3b3c0293afa5355a96b59a4f37d4c0ed71ef3a301d491ac1ee06b396eaf43286a6faca2db06c37b3dc39520712b3df11429288b4cc886c8a8f8ab79f11c49c399cf058acc8e5cd63c90d95964ac363c42506df321591f83608e86339b58e2c6b296a73f68b2fbd9d8a5289cf26727b9e01eb9c40b940d02ff0d21d850670de3f3ab8b0b63d2815e51d19c267193e8a6d8a6873fd9840ede8212cd4084c6d1f223506a596e60f32c6c49aabda50d526be5d8b5dcb9ff504fa46a3d09132256d8f620c38223858250a378875ca33d925a1de275c74906fe71027c48b867d06cd4bbafb9a579a38b073b4f9692959dc0a2388f2884f65b3ba19e7d8f5b1eb9d87dad28d726ff14343795c3c88e0f4ce04b5292de268cbf095da6cb1a69816b48363c94539143c6b1060825a0f69fa28112a6446f44f3293b693e9378391577c4fb8f2a7766b7bf60331a1431137ceda83c40740daa6fe31e401b293fa87cc283d2e2e2f1fd9c89a9dfe911d3f329e4044a606710f00e23b5ee4ca0aceaccf416e27db779de67d72f8839b92d78e83eee621c6bd91d3664e0084d3bd651d3b5e6fa8ddcc593a13732d20f215595cbe67f7d46c3c93fff82221c33273903f93664d2bb4b546eee6491cbe57da3c4d68626b93c1ad51e1ba5e7895e92eed957bf795bab5a81a669e3a2f18b527734652ea1af35e56bb0e207f1cc50b820c560247e9f1a76fc423055b6bcaf29576bfd13bb72d79346f32c4ec03b3fa00d6bd6120dba9162e9a9a65d576d516fdad46e87b92260119a027cad4a7d259d740d99e4d027dd04732528e62aec1325488b018efd150b52a08e502ca1e21e25c310c484f2abe0109d38a4c348c7ab64de3325c8c15ae1d685f3d23e25b8b0545b42927d1c7eba0d19fbf6d19ef3a1e1d12e05faf53b1ba642c6a6feafd870d5231e953202782121f695ab934b2ca926853b0e19e2295afbcff6ecb0ca93509564e0eeaead3203ee0321f2eb6bfac16bb43b6b20e044e1750f6ff2eb6780d91756042be46a1a54b72648f09d04395aeac9606d30565202329a6b2a68c2251458a2fc0b3720d4ffa04eda11d5345e060b65d5d2b2906467d053b63190a55b16dc326a8e43eca1a3ab157a78aeaf63b3b6fcb0a9686c2b9d173a22b0a4de69d99a2842a4cb6c64c229b703b5f7a475bcbc20099b6a8708a7059969706497c969a2805744d9fc9a3dd279afa2946447a5d6a3d26db4c0554ece3729e7be10ff82c5de5f9e6dff0dff3567d9ba83343dde614aeaf5139fb2b319421d15324add871a1ae6a5daf67455830cfa760731b9fcb1e8a00c4d6e42fc3ecc5688c9e35655d8df020d81ecd50c4ce96c708690b3b534888ed4f2f91d9914ee1145b8d9a89b6e46713f82036e0c5b43774722639149f6904e430a5676862dd46cbdd0a55175214c9d16443ae42ed7c63b925d4ad15669ee6ed28aa46798b8d03e5c43f167854f0f6f0c37854bbfcc3f321ac36c8ac8caa108e0a50d28cc88b921106027fe069280447022c417862ebda416539669cc40de8d71566aa25a3dda991bb7b4053ddd71902e19f9a17fa347d9cf371146f2b10e7d7af05cd42d74c595fe62df93f7b34289e46b7f61b82877ed874f1b626f6d9a3ce747805f1f8947e486f4f059db536ee4cfc53b6cc7263e7b03401e5df2dfa51c7592eff1c706016d2727e94fefcfd2bd24fee95e6399677129c1818ecb341bf4cacedcdeab9230bb9a963f510810871b0be171a31ab300e4f2e4ac8b9a6c8c5c6c24bd1f045f11fa75e6fae4666d152570458277a87cc38ffff90d4e77fa6c4aa7087d85dffecea2fc6cf0ab66cb5add1d8fbca855abdad329b83eb2d3398a7a8ffc8c76b0bf3c221d725435921ececcfd5acf51efe2c1a9ce249982e8c002fd84c674d64a1089e81cd888bac26f4cd9c4922b6a429907fc7e4005ca00a3b34442be8e6171c359896a64823823252b9cc167a1f07f42ef4e349dd6834ae463ebf250970c78f25b288255a8f50c87a04f0843bc5288d69cfddc3b7abd160b6c0a4f46cde262509fbedf9b0977f07326e9f6622d2dd430a5a4018b6f8f2693923071f544381c9ab35f2f3ac114549983aa62b9dccc14137bfb4eced41dc252fb7c3e9ba434cc6cc016173db233a5a553223762a912a2114997f1b7a0f7964f1d2162de987eb664d35c49e35f6327570c69dc93dd89c2c95b4f299d10b5efef5a2fd0069d45cd33bd208c0360da2119aab9fc935a98c2043673448113ae3c225d11d743c1558fb44f8f8a63861ea4355d1941bfba93be005c2c4557b9ef14a0ce2f5468f9c41322d764306fb79b190012cf8bd80a3e3db105745cc6ef4af2c43e0c41ce806e8928740fae6c9bdd25db38d40eb6682d3b3696718c28bf6545eb15119562f60680537fa8a58030b89a879b8a2448e84d95ba2a5ef5f0e1fc290ef0a1ea53465aa2a9c69406d12f5732691d76abe1570c6084783a9e4aad2071eed67af1e318ec555bf7f2f04f28af703137cb417a086b5b0ad7c366258bb5034ac1c8c517646018a38e70bfdb0780b7690c32205c3cfc081de5fd1ddb722a97334bc738a972892c0384e5e568ee18d666fa561151a9b808de28a005388efb46bd6616eeb9a26ef7e3febc6a4f657a0b4157dd5759cb69d253444f8887b20e1910800421bf358a928cb35889460310aa6f8ddbbf11114f7ffdf5f11c7f128ac4937aa2cc184ebafd69d312f6a0fc8169c1912b67012060515ac2323447ef749d28c8bdaa839cb24db52ea35a04d381d482c4d9b3c0cd389f885fedf8bb5a415c4ddbde48a2aa6a10ff3394b378290521449bb2098c53b59d91e80b31ed547a4ba6550fd732fdd00ebbbd0a90374fb9b8122ddeceae3591c2e259d42e7afc4eaadc3b77121f5c7acbfac9b76e6f9d8c283a34c83af24538a0be578ffc2f6a2e2449997e3764845996cb6d1537eeefc6b42aedae81057586ac97fec3b4b986a06bd1e338e1c5866614c8f43fedc76c24a0a9ef9d7987cc4470417bf0640b36fbc92862babbefd871dea5af9e22d7ead955157a5ca7ff490843edcbece59a0be2fff49f6de24c66ee832d1e81f48d4943946f5d773616b110cf33dd27a40a5f28b3c6d3687f3866a014a0da4ca5ba5683b9fa321a7d55174ac299d1740b03f3f82292a22942ad94e06b66fc805da04663416f1d67b652d0e81b1663805ba2c32bc95f50dd8089fadcee11919667cdba7a45848a63c63f602916a53d39235fac8594cd33c341b4b4c5f5428b0f646f2396d636665fb00a6ce224f649bfa8406bc69b28dc1f1b714ce7d267526e512b86ac9731c0355f8e70e4ee1ef60b5fe50f51a58a95ef9199f1cae2948aff12ed58f6d1939d34a2fa20e170fc9c5a65797c6f6f6262a4b4ddf7d4f7feb23bdb6b9bfe64c55a8316e8ebe09fc4a2cd6994f2821c90ecb2f61a88651bc8d3a145c3b2d259fa5aa0bf8c046fbcabdd23ba83788ff10a864c20d885a8f4bde0477709846a7a0b943ac23a92390358f052d457c86fa43a0e53c9a2efb9c775f25aba1e149e67b07e513a53fd04de5168190f603b1b06cc01d98ff51dde41fe395a3158342ced5a8ab7eea0ea4c27a053d5de474257a31e3234e752f1adde3558874df6d1711869a6e7941efd445e452083cabea08fd4a214af026a748dd1688b0d27d1458d0b26ead5ab6f36ea79ca62944bb595c252ec3197784d6e8fa09b1996329f9eb773d369548dd73bc4ad4c68b96a1f2bf3c31d1abf53ff64fcdc3aa3faba0305a4a9a43aad970a1698934f7ebe5b3589b047fe3391f7ab3272abfcd9daac596bb6ad0a4f6dc86ba124fd1a9c885acc742ea44d234c6645f22938a0ebbaeb26a82929d0a80fc3ed2d05ea70be4452be054d82ecc6401aaabc70eea2f7233acf311d852e86a65302bb23979352d7f4b5f11492f72e50ad91327031fce36c9648b3df8a643347f03105dd022f25dd648070e7f3c0c2f9e045510eecf1fcf99034dafc41e528bf8a0eadb447bfb9538b31ff0413ba82e99538ff58bb4ad57e241121f1fef219cb01e3428fa444f8d6bfeafd1edc6c046b5f963c14fc1b50da61f62feb46ed5ff7d6d8767524ddc43ce5ef253374b7a6ab19429d2107385bdd188da5f22a297ccab9b0e189e325ea5c4b25c990cd75c3462ee3e1e90fe5bddfd9e1e220f2083393107890108191f839bfabbb014132e9d107ba3693b98809af65b3b355c24181c63697276315c4fb51245786078b9c856cddbbc224f49cbc89affeac6a12ed7fed39068b4c45817050b82d414dbe61d17cc0db67c6fc6b34a8abb7985b0eeda7edecb1f0ef2c1f209de01ed8a4da00a0542075ea0a9ae266ace6e8fafaf387fb9534828e5467ed54d14158a47f364048f26279b8752a3a1a6361afd056b4921bbd4d824dddba1353d4ee6f2c38bdf0cba9c01fb1848dedaf2a2ee417ea796723e31c49e263c54ff13f11a44dd3098912375ac87654ba7d650233b7603d9d2b9f3aba0686eb6637cc168"}, 0xe02, 0x0) 12:19:24 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = syz_io_uring_setup(0x4959, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xed}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfff, 0x6, 0x10, 0x3, "4543b9d431fd1c4b215e694633daa5f67a2a2425d57ae17a57a1c23c7cb95413e07d75469b7841e6402746df11cda11a86c16a2ef8d9d981a7c2e10debc0f367", "fb8b36f3edb06c09d0704b0fe08830c4e00464783e5b80ef5327b730df2f34b8", [0x5, 0x7]}) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x403) write(r0, &(0x7f0000000140)="d5", 0x1) r6 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8801, 0x0, 0x0, 0x7, 0x101, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r6, 0x0, 0x100000006, 0x40000006) 12:19:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 515.984243][ C1] sd 0:0:1:0: [sda] tag#363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 515.994580][ C1] sd 0:0:1:0: [sda] tag#363 CDB: opcode=0xe5 (vendor) [ 516.001377][ C1] sd 0:0:1:0: [sda] tag#363 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 516.010842][ C1] sd 0:0:1:0: [sda] tag#363 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 516.020328][ C1] sd 0:0:1:0: [sda] tag#363 CDB[20]: ba 12:19:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:25 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = syz_io_uring_setup(0x4959, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xed}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfff, 0x6, 0x10, 0x3, "4543b9d431fd1c4b215e694633daa5f67a2a2425d57ae17a57a1c23c7cb95413e07d75469b7841e6402746df11cda11a86c16a2ef8d9d981a7c2e10debc0f367", "fb8b36f3edb06c09d0704b0fe08830c4e00464783e5b80ef5327b730df2f34b8", [0x5, 0x7]}) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x403) write(r0, &(0x7f0000000140)="d5", 0x1) r6 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8801, 0x0, 0x0, 0x7, 0x101, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r6, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) syz_io_uring_setup(0x4959, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xed}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6) (async) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) (async) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) (async) pipe(&(0x7f0000000040)) (async) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfff, 0x6, 0x10, 0x3, "4543b9d431fd1c4b215e694633daa5f67a2a2425d57ae17a57a1c23c7cb95413e07d75469b7841e6402746df11cda11a86c16a2ef8d9d981a7c2e10debc0f367", "fb8b36f3edb06c09d0704b0fe08830c4e00464783e5b80ef5327b730df2f34b8", [0x5, 0x7]}) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x403) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8801, 0x0, 0x0, 0x7, 0x101, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r6, 0x0, 0x100000006, 0x40000006) (async) 12:19:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 7) 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffff5, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8930, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x10}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 516.301368][T14334] FAULT_INJECTION: forcing a failure. [ 516.301368][T14334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.314707][T14334] CPU: 0 PID: 14334 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 516.323131][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.333192][T14334] Call Trace: [ 516.336477][T14334] [ 516.339412][T14334] dump_stack_lvl+0xd6/0x122 [ 516.344019][T14334] dump_stack+0x11/0x1b [ 516.348183][T14334] should_fail+0x23c/0x250 [ 516.352637][T14334] __alloc_pages+0x102/0x330 [ 516.357236][T14334] alloc_pages+0x316/0x420 [ 516.361660][T14334] folio_alloc+0x1a/0x20 [ 516.365909][T14334] filemap_alloc_folio+0x53/0xf0 [ 516.370860][T14334] page_cache_ra_unbounded+0x1c0/0x400 [ 516.376447][T14334] ondemand_readahead+0x4f8/0x700 [ 516.381515][T14334] page_cache_sync_ra+0xaf/0xe0 [ 516.386454][T14334] filemap_read+0x3ed/0x1430 [ 516.391085][T14334] generic_file_read_iter+0x72/0x320 [ 516.396426][T14334] ? iov_iter_pipe+0x100/0x150 [ 516.401198][T14334] ? ext4_file_read_iter+0x7a/0x1f0 [ 516.406515][T14334] generic_file_splice_read+0x24f/0x330 [ 516.412076][T14334] ? splice_shrink_spd+0x60/0x60 [ 516.417025][T14334] splice_direct_to_actor+0x2aa/0x650 [ 516.422410][T14334] ? do_splice_direct+0x190/0x190 [ 516.427478][T14334] do_splice_direct+0x106/0x190 [ 516.432351][T14334] do_sendfile+0x675/0xc40 [ 516.436825][T14334] __x64_sys_sendfile64+0x102/0x140 [ 516.442060][T14334] do_syscall_64+0x44/0xd0 [ 516.446621][T14334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.452518][T14334] RIP: 0033:0x7f44610ccfe9 [ 516.456951][T14334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.476646][T14334] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 516.485071][T14334] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 516.493057][T14334] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x9c}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 516.501032][T14334] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.509038][T14334] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 516.517049][T14334] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 516.525028][T14334] 12:19:25 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8931, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 516.556812][ C0] sd 0:0:1:0: [sda] tag#374 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.567149][ C0] sd 0:0:1:0: [sda] tag#374 CDB: opcode=0xe5 (vendor) [ 516.573953][ C0] sd 0:0:1:0: [sda] tag#374 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 516.583447][ C0] sd 0:0:1:0: [sda] tag#374 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 516.592950][ C0] sd 0:0:1:0: [sda] tag#374 CDB[20]: ba 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x8}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:25 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) r1 = syz_io_uring_setup(0x4959, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xed}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x6) (async) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfff, 0x6, 0x10, 0x3, "4543b9d431fd1c4b215e694633daa5f67a2a2425d57ae17a57a1c23c7cb95413e07d75469b7841e6402746df11cda11a86c16a2ef8d9d981a7c2e10debc0f367", "fb8b36f3edb06c09d0704b0fe08830c4e00464783e5b80ef5327b730df2f34b8", [0x5, 0x7]}) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x403) write(r0, &(0x7f0000000140)="d5", 0x1) r6 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8801, 0x0, 0x0, 0x7, 0x101, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r6, 0x0, 0x100000006, 0x40000006) 12:19:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 8) 12:19:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x9}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 516.734248][ C0] sd 0:0:1:0: [sda] tag#325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.744584][ C0] sd 0:0:1:0: [sda] tag#325 CDB: opcode=0xe5 (vendor) [ 516.751398][ C0] sd 0:0:1:0: [sda] tag#325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 516.760908][ C0] sd 0:0:1:0: [sda] tag#325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 516.770422][ C0] sd 0:0:1:0: [sda] tag#325 CDB[20]: ba [ 516.852024][T14375] FAULT_INJECTION: forcing a failure. [ 516.852024][T14375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.865296][T14375] CPU: 1 PID: 14375 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 516.873749][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.883811][T14375] Call Trace: [ 516.887170][T14375] [ 516.890103][T14375] dump_stack_lvl+0xd6/0x122 [ 516.894788][T14375] dump_stack+0x11/0x1b [ 516.898956][T14375] should_fail+0x23c/0x250 [ 516.903379][T14375] __alloc_pages+0x102/0x330 [ 516.908134][T14375] alloc_pages+0x316/0x420 [ 516.912560][T14375] folio_alloc+0x1a/0x20 [ 516.916813][T14375] filemap_alloc_folio+0x53/0xf0 [ 516.921783][T14375] page_cache_ra_unbounded+0x1c0/0x400 [ 516.927247][T14375] ondemand_readahead+0x4f8/0x700 [ 516.932286][T14375] page_cache_sync_ra+0xaf/0xe0 [ 516.937142][T14375] filemap_read+0x3ed/0x1430 [ 516.941747][T14375] ? try_charge_memcg+0x9de/0xa50 [ 516.946861][T14375] generic_file_read_iter+0x72/0x320 [ 516.952199][T14375] ? iov_iter_pipe+0x100/0x150 [ 516.957018][T14375] ? ext4_file_read_iter+0x7a/0x1f0 [ 516.962267][T14375] generic_file_splice_read+0x24f/0x330 [ 516.967868][T14375] ? splice_shrink_spd+0x60/0x60 [ 516.972814][T14375] splice_direct_to_actor+0x2aa/0x650 [ 516.978217][T14375] ? do_splice_direct+0x190/0x190 [ 516.983321][T14375] do_splice_direct+0x106/0x190 [ 516.988227][T14375] do_sendfile+0x675/0xc40 [ 516.992725][T14375] __x64_sys_sendfile64+0x102/0x140 [ 516.997937][T14375] do_syscall_64+0x44/0xd0 [ 517.002411][T14375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.008377][T14375] RIP: 0033:0x7f44610ccfe9 [ 517.013226][T14375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 517.032839][T14375] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 517.041262][T14375] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 517.049241][T14375] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 517.057303][T14375] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 517.065300][T14375] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 517.073327][T14375] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 517.081317][T14375] 12:19:26 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:26 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'bridge_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x44a, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0xe440, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8932, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x11}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:26 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 9) [ 517.442283][T14385] FAULT_INJECTION: forcing a failure. [ 517.442283][T14385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 517.455563][T14385] CPU: 0 PID: 14385 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 517.464020][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.474103][T14385] Call Trace: [ 517.477423][T14385] [ 517.480353][T14385] dump_stack_lvl+0xd6/0x122 [ 517.485041][T14385] dump_stack+0x11/0x1b [ 517.489335][T14385] should_fail+0x23c/0x250 [ 517.493759][T14385] __alloc_pages+0x102/0x330 [ 517.498355][T14385] alloc_pages+0x316/0x420 [ 517.502787][T14385] folio_alloc+0x1a/0x20 [ 517.507036][T14385] filemap_alloc_folio+0x53/0xf0 [ 517.511980][T14385] page_cache_ra_unbounded+0x1c0/0x400 [ 517.517480][T14385] ondemand_readahead+0x4f8/0x700 [ 517.522524][T14385] page_cache_sync_ra+0xaf/0xe0 [ 517.527446][T14385] filemap_read+0x3ed/0x1430 [ 517.532049][T14385] ? try_charge_memcg+0x9de/0xa50 [ 517.537087][T14385] generic_file_read_iter+0x72/0x320 12:19:26 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 517.542396][T14385] ? iov_iter_pipe+0x100/0x150 [ 517.547169][T14385] ? ext4_file_read_iter+0x7a/0x1f0 [ 517.552380][T14385] generic_file_splice_read+0x24f/0x330 [ 517.557958][T14385] ? splice_shrink_spd+0x60/0x60 [ 517.563008][T14385] splice_direct_to_actor+0x2aa/0x650 [ 517.568391][T14385] ? do_splice_direct+0x190/0x190 [ 517.573431][T14385] do_splice_direct+0x106/0x190 [ 517.578295][T14385] do_sendfile+0x675/0xc40 [ 517.582718][T14385] __x64_sys_sendfile64+0x102/0x140 [ 517.587927][T14385] do_syscall_64+0x44/0xd0 [ 517.592355][T14385] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.598340][T14385] RIP: 0033:0x7f44610ccfe9 [ 517.602758][T14385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 517.622421][T14385] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 517.630907][T14385] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 517.638885][T14385] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 517.646860][T14385] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 517.654843][T14385] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000001 [ 517.662818][T14385] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 517.670874][T14385] 12:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x8}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:26 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'bridge_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}) (async) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x44a, 0x1) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0xe440, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x12}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:27 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:27 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'bridge_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x44a, 0x1) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0xe440, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:27 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 10) 12:19:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8937, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x300}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 518.369048][T14423] FAULT_INJECTION: forcing a failure. [ 518.369048][T14423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.382313][T14423] CPU: 0 PID: 14423 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 518.390748][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.400816][T14423] Call Trace: [ 518.404154][T14423] [ 518.407089][T14423] dump_stack_lvl+0xd6/0x122 [ 518.411778][T14423] dump_stack+0x11/0x1b [ 518.415939][T14423] should_fail+0x23c/0x250 [ 518.420360][T14423] __alloc_pages+0x102/0x330 [ 518.424960][T14423] alloc_pages+0x316/0x420 [ 518.429382][T14423] folio_alloc+0x1a/0x20 [ 518.433630][T14423] filemap_alloc_folio+0x53/0xf0 [ 518.438615][T14423] page_cache_ra_unbounded+0x1c0/0x400 [ 518.444085][T14423] ondemand_readahead+0x4f8/0x700 [ 518.449132][T14423] page_cache_sync_ra+0xaf/0xe0 [ 518.454011][T14423] filemap_read+0x3ed/0x1430 [ 518.458615][T14423] generic_file_read_iter+0x72/0x320 [ 518.463972][T14423] ? iov_iter_pipe+0x100/0x150 [ 518.468753][T14423] ? ext4_file_read_iter+0x7a/0x1f0 [ 518.473967][T14423] generic_file_splice_read+0x24f/0x330 [ 518.479525][T14423] ? splice_shrink_spd+0x60/0x60 [ 518.484468][T14423] splice_direct_to_actor+0x2aa/0x650 [ 518.489858][T14423] ? do_splice_direct+0x190/0x190 [ 518.494915][T14423] do_splice_direct+0x106/0x190 [ 518.499799][T14423] do_sendfile+0x675/0xc40 [ 518.504222][T14423] __x64_sys_sendfile64+0x102/0x140 [ 518.509424][T14423] do_syscall_64+0x44/0xd0 [ 518.513852][T14423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.519825][T14423] RIP: 0033:0x7f44610ccfe9 [ 518.524277][T14423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.543898][T14423] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 518.552317][T14423] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 518.560298][T14423] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:27 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x67, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="e5f4327d2c732f4e096d26e2c735d135121c921b9a3c0a508bd32f0cb3f040b8585ba8d47d34f3904cf11753a6045997a05f9b33fc1635260643ede4e797c3d170b8b6f2c4bcbb3af285c355f86180b943715a90e533a2466251da523215d21fb9a118227d770f", 0x0, 0x4, 0x35, 0x1, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x50b802, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000200)) [ 518.568284][T14423] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.576317][T14423] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 518.584300][T14423] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 518.592351][T14423] 12:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:27 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8942, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x3}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:27 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) fcntl$setlease(r0, 0x400, 0x2) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x67, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="e5f4327d2c732f4e096d26e2c735d135121c921b9a3c0a508bd32f0cb3f040b8585ba8d47d34f3904cf11753a6045997a05f9b33fc1635260643ede4e797c3d170b8b6f2c4bcbb3af285c355f86180b943715a90e533a2466251da523215d21fb9a118227d770f", 0x0, 0x4, 0x35, 0x1, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x50b802, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000200)) 12:19:28 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8931, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) (async) fcntl$setlease(r0, 0x400, 0x2) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x67, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="e5f4327d2c732f4e096d26e2c735d135121c921b9a3c0a508bd32f0cb3f040b8585ba8d47d34f3904cf11753a6045997a05f9b33fc1635260643ede4e797c3d170b8b6f2c4bcbb3af285c355f86180b943715a90e533a2466251da523215d21fb9a118227d770f", 0x0, 0x4, 0x35, 0x1, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x50b802, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000200)) 12:19:28 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 11) [ 519.312956][T14475] FAULT_INJECTION: forcing a failure. [ 519.312956][T14475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.326261][T14475] CPU: 1 PID: 14475 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 519.334687][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.344805][T14475] Call Trace: [ 519.348089][T14475] [ 519.351023][T14475] dump_stack_lvl+0xd6/0x122 [ 519.355629][T14475] dump_stack+0x11/0x1b [ 519.359799][T14475] should_fail+0x23c/0x250 [ 519.364229][T14475] __alloc_pages+0x102/0x330 [ 519.368862][T14475] alloc_pages+0x316/0x420 [ 519.373289][T14475] folio_alloc+0x1a/0x20 [ 519.377655][T14475] filemap_alloc_folio+0x53/0xf0 [ 519.382603][T14475] page_cache_ra_unbounded+0x1c0/0x400 [ 519.388075][T14475] ondemand_readahead+0x4f8/0x700 [ 519.393240][T14475] page_cache_sync_ra+0xaf/0xe0 [ 519.398100][T14475] filemap_read+0x3ed/0x1430 [ 519.402718][T14475] generic_file_read_iter+0x72/0x320 [ 519.408077][T14475] ? iov_iter_pipe+0x100/0x150 [ 519.412926][T14475] ? ext4_file_read_iter+0x7a/0x1f0 [ 519.418135][T14475] generic_file_splice_read+0x24f/0x330 [ 519.423710][T14475] ? splice_shrink_spd+0x60/0x60 [ 519.428654][T14475] splice_direct_to_actor+0x2aa/0x650 [ 519.434034][T14475] ? do_splice_direct+0x190/0x190 [ 519.439066][T14475] do_splice_direct+0x106/0x190 [ 519.443988][T14475] do_sendfile+0x675/0xc40 [ 519.448416][T14475] __x64_sys_sendfile64+0x102/0x140 [ 519.453640][T14475] do_syscall_64+0x44/0xd0 [ 519.458067][T14475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.463979][T14475] RIP: 0033:0x7f44610ccfe9 [ 519.468396][T14475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.488029][T14475] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 519.496468][T14475] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 519.504444][T14475] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x5}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 519.512420][T14475] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.520392][T14475] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 519.528367][T14475] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 519.536348][T14475] 12:19:28 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1d61a14fc320beca, 0x14) pwritev(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) fallocate(r0, 0x20, 0x0, 0x401) write(r0, &(0x7f0000000140)="d5", 0x1) open(&(0x7f0000000180)='./bus\x00', 0xe001, 0x20) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x54, &(0x7f0000000300)=""/84}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10002, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x40030, r0, 0x7c8ba000) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = getpid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffd, 0x14280, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c73713d3078303030303030303030303031303030302c74696d656f75743d3078303030303030303030303030303038632c74696d656f75743d3078303030303030303030303030303038372c73713d3078666666666666666666666666663030302c714364f6747970653d2c2d2d23472c666f776e65723d56aaf34bf2fc735e", @ANYRESDEC=r5, @ANYBLOB="2306e5a0b2675d02a2b8"]) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1d61a14fc320beca, 0x14) pwritev(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) fallocate(r0, 0x20, 0x0, 0x401) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000180)='./bus\x00', 0xe001, 0x20) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x54, &(0x7f0000000300)=""/84}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10002, 0x0, 0x0}) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x40030, r0, 0x7c8ba000) (async) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = getpid() (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) (async) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffd, 0x14280, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c73713d3078303030303030303030303031303030302c74696d656f75743d3078303030303030303030303030303038632c74696d656f75743d3078303030303030303030303030303038372c73713d3078666666666666666666666666663030302c714364f6747970653d2c2d2d23472c666f776e65723d56aaf34bf2fc735e", @ANYRESDEC=r5, @ANYBLOB="2306e5a0b2675d02a2b8"]) (async) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x7}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1d61a14fc320beca, 0x14) pwritev(r0, &(0x7f0000000000), 0x0, 0x10001, 0x0) (async) fallocate(r0, 0x20, 0x0, 0x401) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000180)='./bus\x00', 0xe001, 0x20) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x54, &(0x7f0000000300)=""/84}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10002, 0x0, 0x0}) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x40030, r0, 0x7c8ba000) (async) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) (async) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) r3 = getpid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffd, 0x14280, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c73713d3078303030303030303030303031303030302c74696d656f75743d3078303030303030303030303030303038632c74696d656f75743d3078303030303030303030303030303038372c73713d3078666666666666666666666666663030302c714364f6747970653d2c2d2d23472c666f776e65723d56aaf34bf2fc735e", @ANYRESDEC=r5, @ANYBLOB="2306e5a0b2675d02a2b8"]) (async) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x8}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x9}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 12) [ 520.012824][T14525] FAULT_INJECTION: forcing a failure. [ 520.012824][T14525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.026620][T14525] CPU: 1 PID: 14525 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 520.035124][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.045188][T14525] Call Trace: [ 520.048530][T14525] [ 520.051533][T14525] dump_stack_lvl+0xd6/0x122 [ 520.056142][T14525] dump_stack+0x11/0x1b [ 520.060317][T14525] should_fail+0x23c/0x250 [ 520.064744][T14525] __alloc_pages+0x102/0x330 [ 520.069409][T14525] alloc_pages+0x316/0x420 [ 520.073836][T14525] folio_alloc+0x1a/0x20 [ 520.078088][T14525] filemap_alloc_folio+0x53/0xf0 [ 520.083043][T14525] page_cache_ra_unbounded+0x1c0/0x400 [ 520.088545][T14525] ondemand_readahead+0x4f8/0x700 [ 520.093587][T14525] page_cache_sync_ra+0xaf/0xe0 [ 520.098473][T14525] filemap_read+0x3ed/0x1430 [ 520.103221][T14525] generic_file_read_iter+0x72/0x320 [ 520.108520][T14525] ? iov_iter_pipe+0x100/0x150 [ 520.113329][T14525] ? ext4_file_read_iter+0x7a/0x1f0 [ 520.118536][T14525] generic_file_splice_read+0x24f/0x330 [ 520.124101][T14525] ? splice_shrink_spd+0x60/0x60 [ 520.129161][T14525] splice_direct_to_actor+0x2aa/0x650 [ 520.134573][T14525] ? do_splice_direct+0x190/0x190 [ 520.139680][T14525] do_splice_direct+0x106/0x190 [ 520.144607][T14525] do_sendfile+0x675/0xc40 [ 520.149036][T14525] __x64_sys_sendfile64+0x102/0x140 [ 520.154272][T14525] do_syscall_64+0x44/0xd0 [ 520.158769][T14525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.164788][T14525] RIP: 0033:0x7f44610ccfe9 [ 520.169203][T14525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.188895][T14525] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 520.197389][T14525] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 520.205399][T14525] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 520.213380][T14525] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 520.221362][T14525] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 520.229344][T14525] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 520.237335][T14525] 12:19:29 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:29 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x5a4200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000100000018000000f1d2", @ANYRES32=r2, @ANYBLOB="03000000010100002e2f62757300"]) write$P9_RREADLINK(r3, &(0x7f0000000180)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0x1) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:29 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:29 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x44}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x48}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x60}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:29 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 13) 12:19:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x88}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 520.685728][T14550] FAULT_INJECTION: forcing a failure. [ 520.685728][T14550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.699020][T14550] CPU: 0 PID: 14550 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 520.707534][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.717633][T14550] Call Trace: [ 520.720922][T14550] [ 520.723856][T14550] dump_stack_lvl+0xd6/0x122 [ 520.728534][T14550] dump_stack+0x11/0x1b [ 520.732752][T14550] should_fail+0x23c/0x250 [ 520.737179][T14550] __alloc_pages+0x102/0x330 [ 520.741776][T14550] alloc_pages+0x316/0x420 [ 520.746203][T14550] folio_alloc+0x1a/0x20 [ 520.750447][T14550] filemap_alloc_folio+0x53/0xf0 [ 520.755439][T14550] page_cache_ra_unbounded+0x1c0/0x400 [ 520.760918][T14550] ondemand_readahead+0x4f8/0x700 [ 520.766002][T14550] page_cache_sync_ra+0xaf/0xe0 [ 520.770881][T14550] filemap_read+0x3ed/0x1430 [ 520.775500][T14550] generic_file_read_iter+0x72/0x320 [ 520.780849][T14550] ? iov_iter_pipe+0x100/0x150 [ 520.785629][T14550] ? ext4_file_read_iter+0x7a/0x1f0 [ 520.790846][T14550] generic_file_splice_read+0x24f/0x330 [ 520.796411][T14550] ? splice_shrink_spd+0x60/0x60 [ 520.801362][T14550] splice_direct_to_actor+0x2aa/0x650 [ 520.806932][T14550] ? do_splice_direct+0x190/0x190 [ 520.811992][T14550] do_splice_direct+0x106/0x190 [ 520.816927][T14550] do_sendfile+0x675/0xc40 [ 520.821353][T14550] __x64_sys_sendfile64+0x102/0x140 [ 520.826557][T14550] do_syscall_64+0x44/0xd0 [ 520.831062][T14550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.836980][T14550] RIP: 0033:0x7f44610ccfe9 [ 520.841558][T14550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.861236][T14550] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 520.869658][T14550] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 520.877637][T14550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:29 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async, rerun: 32) write(r0, &(0x7f0000000140)="d5", 0x1) (async, rerun: 32) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x5a4200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000100000018000000f1d2", @ANYRES32=r2, @ANYBLOB="03000000010100002e2f62757300"]) (async) write$P9_RREADLINK(r3, &(0x7f0000000180)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0x1) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 520.885622][T14550] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 520.893605][T14550] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 520.901582][T14550] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 520.909562][T14550] 12:19:30 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8948, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:30 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x5a4200) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000100000018000000f1d2", @ANYRES32=r2, @ANYBLOB="03000000010100002e2f62757300"]) write$P9_RREADLINK(r3, &(0x7f0000000180)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0x1) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x5a4200) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000100000018000000f1d2", @ANYRES32=r2, @ANYBLOB="03000000010100002e2f62757300"]) (async) write$P9_RREADLINK(r3, &(0x7f0000000180)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0x1) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x253}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:30 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 14) [ 521.481042][T14584] FAULT_INJECTION: forcing a failure. [ 521.481042][T14584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.494308][T14584] CPU: 1 PID: 14584 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 521.502730][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.512796][T14584] Call Trace: [ 521.516079][T14584] [ 521.519011][T14584] dump_stack_lvl+0xd6/0x122 [ 521.523630][T14584] dump_stack+0x11/0x1b [ 521.527794][T14584] should_fail+0x23c/0x250 [ 521.532220][T14584] __alloc_pages+0x102/0x330 [ 521.536846][T14584] alloc_pages+0x316/0x420 [ 521.541266][T14584] folio_alloc+0x1a/0x20 [ 521.545530][T14584] filemap_alloc_folio+0x53/0xf0 [ 521.550553][T14584] page_cache_ra_unbounded+0x1c0/0x400 [ 521.556048][T14584] ondemand_readahead+0x4f8/0x700 [ 521.561138][T14584] page_cache_sync_ra+0xaf/0xe0 [ 521.566008][T14584] filemap_read+0x3ed/0x1430 [ 521.570714][T14584] generic_file_read_iter+0x72/0x320 [ 521.576015][T14584] ? iov_iter_pipe+0x100/0x150 12:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x300}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8949, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 521.580887][T14584] ? ext4_file_read_iter+0x7a/0x1f0 [ 521.586095][T14584] generic_file_splice_read+0x24f/0x330 [ 521.591700][T14584] ? splice_shrink_spd+0x60/0x60 [ 521.596647][T14584] splice_direct_to_actor+0x2aa/0x650 [ 521.602109][T14584] ? do_splice_direct+0x190/0x190 [ 521.607148][T14584] do_splice_direct+0x106/0x190 [ 521.612017][T14584] do_sendfile+0x675/0xc40 [ 521.616524][T14584] __x64_sys_sendfile64+0x102/0x140 [ 521.621746][T14584] do_syscall_64+0x44/0xd0 [ 521.626178][T14584] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.632114][T14584] RIP: 0033:0x7f44610ccfe9 [ 521.636538][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.656255][T14584] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 521.664685][T14584] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 521.672684][T14584] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 12:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x500}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:30 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffb, 0x1000, 0x3, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f00000005c0)=""/45, 0x2d}]}, &(0x7f0000000740)="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", &(0x7f0000001740)=""/4096, 0x3, 0x10000, 0x0, &(0x7f0000000680)}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r2, r4, &(0x7f0000000040)=0x100000001, 0x8) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 521.680681][T14584] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.688711][T14584] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 521.696692][T14584] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 521.704678][T14584] 12:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x600}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:30 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffb, 0x1000, 0x3, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f00000005c0)=""/45, 0x2d}]}, &(0x7f0000000740)="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", &(0x7f0000001740)=""/4096, 0x3, 0x10000, 0x0, &(0x7f0000000680)}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r2, r4, &(0x7f0000000040)=0x100000001, 0x8) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 521.744121][ C1] sd 0:0:1:0: [sda] tag#348 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 521.754438][ C1] sd 0:0:1:0: [sda] tag#348 CDB: opcode=0xe5 (vendor) [ 521.761236][ C1] sd 0:0:1:0: [sda] tag#348 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 521.770720][ C1] sd 0:0:1:0: [sda] tag#348 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 521.780207][ C1] sd 0:0:1:0: [sda] tag#348 CDB[20]: ba [ 521.833276][ C0] sd 0:0:1:0: [sda] tag#349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 521.843593][ C0] sd 0:0:1:0: [sda] tag#349 CDB: opcode=0xe5 (vendor) [ 521.850367][ C0] sd 0:0:1:0: [sda] tag#349 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 521.859858][ C0] sd 0:0:1:0: [sda] tag#349 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 521.869350][ C0] sd 0:0:1:0: [sda] tag#349 CDB[20]: ba 12:19:30 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x894a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x700}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:30 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) (fail_nth: 15) 12:19:30 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async, rerun: 32) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002740)={0x0, 0xfffffffffffffffb, 0x1000, 0x3, @scatter={0x8, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f00000005c0)=""/45, 0x2d}]}, &(0x7f0000000740)="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", &(0x7f0000001740)=""/4096, 0x3, 0x10000, 0x0, &(0x7f0000000680)}) (rerun: 32) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r2, r4, &(0x7f0000000040)=0x100000001, 0x8) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) [ 522.206274][ C1] sd 0:0:1:0: [sda] tag#357 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.216616][ C1] sd 0:0:1:0: [sda] tag#357 CDB: opcode=0xe5 (vendor) [ 522.223418][ C1] sd 0:0:1:0: [sda] tag#357 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.232922][ C1] sd 0:0:1:0: [sda] tag#357 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.242408][ C1] sd 0:0:1:0: [sda] tag#357 CDB[20]: ba [ 522.250000][T14613] FAULT_INJECTION: forcing a failure. [ 522.250000][T14613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.255065][ C1] sd 0:0:1:0: [sda] tag#358 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.263303][T14613] CPU: 0 PID: 14613 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 522.273502][ C1] sd 0:0:1:0: [sda] tag#358 CDB: opcode=0xe5 (vendor) [ 522.281870][T14613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.281883][T14613] Call Trace: [ 522.281890][T14613] [ 522.288633][ C1] sd 0:0:1:0: [sda] tag#358 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.298662][T14613] dump_stack_lvl+0xd6/0x122 [ 522.301974][ C1] sd 0:0:1:0: [sda] tag#358 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.304865][T14613] dump_stack+0x11/0x1b [ 522.314318][ C1] sd 0:0:1:0: [sda] tag#358 CDB[20]: ba [ 522.335889][ C1] sd 0:0:1:0: [sda] tag#360 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.338080][T14613] should_fail+0x23c/0x250 [ 522.348327][ C1] sd 0:0:1:0: [sda] tag#360 CDB: opcode=0xe5 (vendor) [ 522.352697][T14613] __alloc_pages+0x102/0x330 [ 522.359457][ C1] sd 0:0:1:0: [sda] tag#360 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.364019][T14613] alloc_pages+0x316/0x420 [ 522.373491][ C1] sd 0:0:1:0: [sda] tag#360 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.377859][T14613] folio_alloc+0x1a/0x20 [ 522.387311][ C1] sd 0:0:1:0: [sda] tag#360 CDB[20]: ba [ 522.391511][T14613] filemap_alloc_folio+0x53/0xf0 [ 522.401991][T14613] page_cache_ra_unbounded+0x1c0/0x400 [ 522.407542][T14613] ondemand_readahead+0x4f8/0x700 [ 522.412615][T14613] page_cache_sync_ra+0xaf/0xe0 [ 522.416262][ C1] sd 0:0:1:0: [sda] tag#362 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.417474][T14613] filemap_read+0x3ed/0x1430 [ 522.427718][ C1] sd 0:0:1:0: [sda] tag#362 CDB: opcode=0xe5 (vendor) [ 522.432263][T14613] generic_file_read_iter+0x72/0x320 [ 522.439025][ C1] sd 0:0:1:0: [sda] tag#362 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.444281][T14613] ? iov_iter_pipe+0x100/0x150 [ 522.453737][ C1] sd 0:0:1:0: [sda] tag#362 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.458462][T14613] ? ext4_file_read_iter+0x7a/0x1f0 [ 522.467909][ C1] sd 0:0:1:0: [sda] tag#362 CDB[20]: ba [ 522.473072][T14613] generic_file_splice_read+0x24f/0x330 [ 522.484132][T14613] ? splice_shrink_spd+0x60/0x60 [ 522.489182][T14613] splice_direct_to_actor+0x2aa/0x650 [ 522.494561][T14613] ? do_splice_direct+0x190/0x190 [ 522.499596][T14613] do_splice_direct+0x106/0x190 [ 522.504494][T14613] do_sendfile+0x675/0xc40 [ 522.508944][T14613] __x64_sys_sendfile64+0x102/0x140 [ 522.514150][T14613] do_syscall_64+0x44/0xd0 [ 522.518654][T14613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 522.524551][T14613] RIP: 0033:0x7f44610ccfe9 [ 522.528968][T14613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.548613][T14613] RSP: 002b:00007f4460243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 522.555594][ C1] sd 0:0:1:0: [sda] tag#364 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.557081][T14613] RAX: ffffffffffffffda RBX: 00007f44611dff60 RCX: 00007f44610ccfe9 [ 522.567334][ C1] sd 0:0:1:0: [sda] tag#364 CDB: opcode=0xe5 (vendor) [ 522.575260][T14613] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 522.575273][T14613] RBP: 00007f44602431d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.582057][ C1] sd 0:0:1:0: [sda] tag#364 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 12:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x900}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf00}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) [ 522.589995][T14613] R10: 0000000000201012 R11: 0000000000000246 R12: 0000000000000002 [ 522.597967][ C1] sd 0:0:1:0: [sda] tag#364 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.607378][T14613] R13: 00007fffa4e5f08f R14: 00007f4460243300 R15: 0000000000022000 [ 522.607397][T14613] [ 522.615363][ C1] sd 0:0:1:0: [sda] tag#364 CDB[20]: ba 12:19:31 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 522.721610][ C1] sd 0:0:1:0: [sda] tag#366 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.731930][ C1] sd 0:0:1:0: [sda] tag#366 CDB: opcode=0xe5 (vendor) [ 522.738705][ C1] sd 0:0:1:0: [sda] tag#366 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.748205][ C1] sd 0:0:1:0: [sda] tag#366 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.757687][ C1] sd 0:0:1:0: [sda] tag#366 CDB[20]: ba 12:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x1400}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) [ 522.782526][ C1] sd 0:0:1:0: [sda] tag#368 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.792828][ C1] sd 0:0:1:0: [sda] tag#368 CDB: opcode=0xe5 (vendor) [ 522.799605][ C1] sd 0:0:1:0: [sda] tag#368 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.809101][ C1] sd 0:0:1:0: [sda] tag#368 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.818586][ C1] sd 0:0:1:0: [sda] tag#368 CDB[20]: ba 12:19:31 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8970, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4400}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 522.824398][ C1] sd 0:0:1:0: [sda] tag#370 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.834695][ C1] sd 0:0:1:0: [sda] tag#370 CDB: opcode=0xe5 (vendor) [ 522.841524][ C1] sd 0:0:1:0: [sda] tag#370 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 522.851022][ C1] sd 0:0:1:0: [sda] tag#370 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 522.860522][ C1] sd 0:0:1:0: [sda] tag#370 CDB[20]: ba 12:19:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:31 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000b40)={r3, 0x80000001, 0x10000, 0x8b812afd5ef185b}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup2(r2, r4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./bus\x00', r6}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7}, @timestamp, @timestamp, @mss={0x2, 0xe10}, @window={0x3, 0xf800, 0x200}, @mss={0x2, 0x10007}, @window={0x3, 0x6, 0x4}, @sack_perm], 0x9) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:31 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:31 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8971, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:32 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000b40)={r3, 0x80000001, 0x10000, 0x8b812afd5ef185b}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup2(r2, r4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./bus\x00', r6}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7}, @timestamp, @timestamp, @mss={0x2, 0xe10}, @window={0x3, 0xf800, 0x200}, @mss={0x2, 0x10007}, @window={0x3, 0x6, 0x4}, @sack_perm], 0x9) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 523.604302][T11250] device hsr_slave_0 left promiscuous mode [ 523.622825][T11250] device hsr_slave_1 left promiscuous mode [ 523.629089][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.636540][T11250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.662765][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.670202][T11250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.697326][T11250] device veth0_to_bond left promiscuous mode [ 523.703587][T11250] bridge0: port 3(veth0_to_bond) entered disabled state [ 523.721688][T11250] device bridge_slave_1 left promiscuous mode [ 523.727847][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.752449][T11250] device bridge_slave_0 left promiscuous mode [ 523.758601][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.792194][T11250] device veth1_macvtap left promiscuous mode [ 523.798209][T11250] device veth0_macvtap left promiscuous mode [ 523.804268][T11250] device veth1_vlan left promiscuous mode [ 523.810049][T11250] device veth0_vlan left promiscuous mode [ 523.922368][T11250] team0 (unregistering): Port device team_slave_1 removed [ 523.934779][T11250] team0 (unregistering): Port device team_slave_0 removed [ 523.944906][T11250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.956727][T11250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.983430][T11250] bond0 (unregistering): Released all slaves [ 525.093464][T14682] lo speed is unknown, defaulting to 1000 [ 525.128030][T14682] chnl_net:caif_netlink_parms(): no params data found [ 525.156635][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.163687][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.171384][T14682] device bridge_slave_0 entered promiscuous mode [ 525.178391][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.185422][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.192852][T14682] device bridge_slave_1 entered promiscuous mode [ 525.208435][T14682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.218622][T14682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.236168][T14682] team0: Port device team_slave_0 added [ 525.243276][T14682] team0: Port device team_slave_1 added [ 525.257062][T14682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.264058][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.290123][T14682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.301273][T14682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.308257][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.334152][T14682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.354946][T14682] device hsr_slave_0 entered promiscuous mode [ 525.362127][T14682] device hsr_slave_1 entered promiscuous mode [ 525.368568][T14682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.376124][T14682] Cannot create hsr debugfs directory [ 525.421831][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.432767][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 525.442250][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.449893][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.458926][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.468510][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.477261][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.485565][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.492614][T19222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.500779][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.509496][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.518017][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.526320][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.533405][T10596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.552470][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.561174][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.569498][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.577918][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.587908][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.598200][T14682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.610286][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.617707][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.627408][T14682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.705455][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.750758][T14682] device veth0_vlan entered promiscuous mode [ 525.757748][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.766232][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.773947][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.784631][T14682] device veth1_vlan entered promiscuous mode [ 525.797036][T19223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.805161][T19223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.813541][T19223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.823608][T14682] device veth0_macvtap entered promiscuous mode [ 525.831637][T14682] device veth1_macvtap entered promiscuous mode [ 525.842873][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.853307][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.863199][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.873619][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.883430][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.893832][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.903637][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.914101][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.923928][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 525.934331][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.946231][T14682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.953792][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.962944][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.972310][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 525.982808][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.992612][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.003023][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.012837][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.023254][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.033162][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 12:19:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:34 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000b40)={r3, 0x80000001, 0x10000, 0x8b812afd5ef185b}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup2(r2, r4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./bus\x00', r6}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x7}, @timestamp, @timestamp, @mss={0x2, 0xe10}, @window={0x3, 0xf800, 0x200}, @mss={0x2, 0x10007}, @window={0x3, 0x6, 0x4}, @sack_perm], 0x9) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:34 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:34 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8990, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:34 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201010) [ 526.043622][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.053433][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 526.063844][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.075037][T14682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.083997][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:19:34 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x40010, r3, 0x8) 12:19:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x5302}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x6000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:34 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x40010, r3, 0x8) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x40010, r3, 0x8) (async) 12:19:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x8800}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xff01}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8991, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x7ffff000) 12:19:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x40010, r3, 0x8) 12:19:35 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8992, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:35 executing program 3: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x200000c0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0xa, 0x0, @buffer={0x0, 0xec, &(0x7f0000000440)=""/236}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x12, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffd, 0x4c, 0x8, @scatter={0x3, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}]}, &(0x7f0000000300)="cc85cdfb21eea572a1463cfa24b16e428da3dfc3e79270587a93ba7e61705f77acfcdd72bb12026e9c2dc72e835e7b37acac64c0aef30d2b7fc2aca900e78a797a9ea6681a930d43b74937b7", &(0x7f0000002740)=""/4096, 0x3ff, 0x10022, 0x3, &(0x7f00000001c0)}) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:35 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x5000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:36 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0xffffffff000) 12:19:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x6000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:36 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8994, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:36 executing program 3: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x200000c0) (async) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0xa, 0x0, @buffer={0x0, 0xec, &(0x7f0000000440)=""/236}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x12, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffd, 0x4c, 0x8, @scatter={0x3, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}]}, &(0x7f0000000300)="cc85cdfb21eea572a1463cfa24b16e428da3dfc3e79270587a93ba7e61705f77acfcdd72bb12026e9c2dc72e835e7b37acac64c0aef30d2b7fc2aca900e78a797a9ea6681a930d43b74937b7", &(0x7f0000002740)=""/4096, 0x3ff, 0x10022, 0x3, &(0x7f00000001c0)}) 12:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x7000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201012) 12:19:36 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x8000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:36 executing program 3: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x200000c0) (async, rerun: 64) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (rerun: 64) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0xa, 0x0, @buffer={0x0, 0xec, &(0x7f0000000440)=""/236}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x12, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffd, 0x4c, 0x8, @scatter={0x3, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}]}, &(0x7f0000000300)="cc85cdfb21eea572a1463cfa24b16e428da3dfc3e79270587a93ba7e61705f77acfcdd72bb12026e9c2dc72e835e7b37acac64c0aef30d2b7fc2aca900e78a797a9ea6681a930d43b74937b7", &(0x7f0000002740)=""/4096, 0x3ff, 0x10022, 0x3, &(0x7f00000001c0)}) 12:19:36 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8995, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:37 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0xffffffffffffffff) 12:19:37 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@vsock={0x28, 0x0, 0xffffffff, @host}, {&(0x7f0000000240)=""/219, 0xdb}, &(0x7f0000000100), 0x28}, 0xa0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x4, 0x20, 0xfffc, 0x8, 0x8, "beff7060b95eb48a"}) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x48) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x9000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x14000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 528.401967][ C1] scsi_io_completion_action: 17 callbacks suppressed [ 528.401996][ C1] sd 0:0:1:0: [sda] tag#381 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.418978][ C1] sd 0:0:1:0: [sda] tag#381 CDB: opcode=0xe5 (vendor) [ 528.425781][ C1] sd 0:0:1:0: [sda] tag#381 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 528.435258][ C1] sd 0:0:1:0: [sda] tag#381 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 528.444750][ C1] sd 0:0:1:0: [sda] tag#381 CDB[20]: ba 12:19:37 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x44000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:37 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@vsock={0x28, 0x0, 0xffffffff, @host}, {&(0x7f0000000240)=""/219, 0xdb}, &(0x7f0000000100), 0x28}, 0xa0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) r1 = dup2(r0, r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x4, 0x20, 0xfffc, 0x8, 0x8, "beff7060b95eb48a"}) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x48) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:37 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89a3, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x48000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x53020000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 528.895732][ C1] sd 0:0:1:0: [sda] tag#329 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.906058][ C1] sd 0:0:1:0: [sda] tag#329 CDB: opcode=0xe5 (vendor) [ 528.912850][ C1] sd 0:0:1:0: [sda] tag#329 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 528.922350][ C1] sd 0:0:1:0: [sda] tag#329 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 528.931840][ C1] sd 0:0:1:0: [sda] tag#329 CDB[20]: ba 12:19:37 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@vsock={0x28, 0x0, 0xffffffff, @host}, {&(0x7f0000000240)=""/219, 0xdb}, &(0x7f0000000100), 0x28}, 0xa0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) r1 = dup2(r0, r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x4, 0x20, 0xfffc, 0x8, 0x8, "beff7060b95eb48a"}) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r2 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x48) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r2, 0x0, 0x100000006, 0x40000006) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x60000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x88000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 529.010779][ C0] sd 0:0:1:0: [sda] tag#347 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.021089][ C0] sd 0:0:1:0: [sda] tag#347 CDB: opcode=0xe5 (vendor) [ 529.027876][ C0] sd 0:0:1:0: [sda] tag#347 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 529.037372][ C0] sd 0:0:1:0: [sda] tag#347 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 529.046868][ C0] sd 0:0:1:0: [sda] tag#347 CDB[20]: ba 12:19:37 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x100000001, 0xa68b) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 529.121448][ C1] sd 0:0:1:0: [sda] tag#366 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.131777][ C1] sd 0:0:1:0: [sda] tag#366 CDB: opcode=0xe5 (vendor) [ 529.138555][ C1] sd 0:0:1:0: [sda] tag#366 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 529.148052][ C1] sd 0:0:1:0: [sda] tag#366 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 529.157534][ C1] sd 0:0:1:0: [sda] tag#366 CDB[20]: ba 12:19:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x9effffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:38 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:38 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r2, r3, &(0x7f0000000040)=0x100000001, 0xa68b) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xefffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 529.840399][ C1] sd 0:0:1:0: [sda] tag#381 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.850706][ C1] sd 0:0:1:0: [sda] tag#381 CDB: opcode=0xe5 (vendor) [ 529.857499][ C1] sd 0:0:1:0: [sda] tag#381 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 529.866988][ C1] sd 0:0:1:0: [sda] tag#381 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 529.876507][ C1] sd 0:0:1:0: [sda] tag#381 CDB[20]: ba 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf0ffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf5ffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:38 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89b1, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xff010000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffffff7f}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffffff9e}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffffffef}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:39 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x100000001, 0xa68b) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r2, r3, &(0x7f0000000040)=0x100000001, 0xa68b) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:39 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x40049409, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x1, 0x0, 0x8000], @devid}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}, 0xd00}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r9, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000059900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059b00)={0xfffffffffffffffd, [{}, {0x0, r4}, {}, {}, {}, {}, {0x0, r12}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r2, r4}, {r3}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r10}, {r3}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r2, r4}, {r3}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3, r4}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3}, {r2}, {r3}, {}, {r2}, {}, {r2}, {r3}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r11}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {}, {r7, r11}, {r2, r12}], 0x0, "cc05ecafcb8c65"}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:39 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xfffffff0}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x1, 0x0, 0x8000], @devid}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}, 0xd00}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r9, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000059900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059b00)={0xfffffffffffffffd, [{}, {0x0, r4}, {}, {}, {}, {}, {0x0, r12}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r2, r4}, {r3}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r10}, {r3}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r2, r4}, {r3}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3, r4}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3}, {r2}, {r3}, {}, {r2}, {}, {r2}, {r3}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r11}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {}, {r7, r11}, {r2, r12}], 0x0, "cc05ecafcb8c65"}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x1, 0x0, 0x8000], @devid}) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}, 0xd00}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r9, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000059900)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059b00)={0xfffffffffffffffd, [{}, {0x0, r4}, {}, {}, {}, {}, {0x0, r12}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r2, r4}, {r3}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r10}, {r3}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r2, r4}, {r3}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3, r4}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3}, {r2}, {r3}, {}, {r2}, {}, {r2}, {r3}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r11}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {}, {r7, r11}, {r2, r12}], 0x0, "cc05ecafcb8c65"}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xfffffff5}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 530.725911][ C0] sd 0:0:1:0: [sda] tag#332 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.736253][ C0] sd 0:0:1:0: [sda] tag#332 CDB: opcode=0xe5 (vendor) [ 530.743077][ C0] sd 0:0:1:0: [sda] tag#332 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 530.752565][ C0] sd 0:0:1:0: [sda] tag#332 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 530.762087][ C0] sd 0:0:1:0: [sda] tag#332 CDB[20]: ba 12:19:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001d40)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x1, 0x0, 0x8000], @devid}) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}, 0xd00}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r9, @ANYRESHEX=r8, @ANYRESOCT=r7, @ANYBLOB="76bce60075af5006ea9c87e13e6cdd799cffff"]}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000059900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059b00)={0xfffffffffffffffd, [{}, {0x0, r4}, {}, {}, {}, {}, {0x0, r12}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r2, r4}, {r3}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r10}, {r3}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {r2}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r2, r4}, {r3}, {r3, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3, r4}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3}, {r2}, {r3}, {}, {r2}, {}, {r2}, {r3}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r11}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {}, {r7, r11}, {r2, r12}], 0x0, "cc05ecafcb8c65"}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xea7d, @mcast2, 0x9}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) write(r2, &(0x7f0000000040)="ff58c6ff66ecdcb0071df547cdb93f725d255dedccc195bcf0db0a54b95e489e67bb56cdf9a487eea731cb03dfd030ce73c2c3f69a4553dc760e7ad1ff4199b14a2ac3ab21e5f7591c80993c42073cf08c7f9558be5d1d4038e1c99e037af0d9d7e6a146f2b7cda19632433463679adb2188b40fdbddcfc8f5b6608a18d3b6657f08c300e6cde494f1cf0ba69e79b3ce62a143888ee95532f4bda50b07feeebd7456c2f8f47fedb304ae6032224fb14d5f113dfcd8ca0a31d0c874c37308a265f0b2294bfe08ee1475a0ea4c0839a790f7d88a4e7598e3ca8889180db78f69903f412c6976290939", 0xe8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r2, 0x0, 0x201012) 12:19:39 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r0, 0x68f05000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) fallocate(0xffffffffffffffff, 0x4, 0x7d29, 0x3) 12:19:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 531.040540][ C0] sd 0:0:1:0: [sda] tag#352 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.050852][ C0] sd 0:0:1:0: [sda] tag#352 CDB: opcode=0xe5 (vendor) [ 531.057643][ C0] sd 0:0:1:0: [sda] tag#352 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 531.067140][ C0] sd 0:0:1:0: [sda] tag#352 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 531.076639][ C0] sd 0:0:1:0: [sda] tag#352 CDB[20]: ba 12:19:40 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x40086602, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xea7d, @mcast2, 0x9}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) (async) write(r2, &(0x7f0000000040)="ff58c6ff66ecdcb0071df547cdb93f725d255dedccc195bcf0db0a54b95e489e67bb56cdf9a487eea731cb03dfd030ce73c2c3f69a4553dc760e7ad1ff4199b14a2ac3ab21e5f7591c80993c42073cf08c7f9558be5d1d4038e1c99e037af0d9d7e6a146f2b7cda19632433463679adb2188b40fdbddcfc8f5b6608a18d3b6657f08c300e6cde494f1cf0ba69e79b3ce62a143888ee95532f4bda50b07feeebd7456c2f8f47fedb304ae6032224fb14d5f113dfcd8ca0a31d0c874c37308a265f0b2294bfe08ee1475a0ea4c0839a790f7d88a4e7598e3ca8889180db78f69903f412c6976290939", 0xe8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r2, 0x0, 0x201012) 12:19:40 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r0, 0x68f05000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) fallocate(0xffffffffffffffff, 0x4, 0x7d29, 0x3) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r0, 0x68f05000) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) fallocate(0xffffffffffffffff, 0x4, 0x7d29, 0x3) (async) 12:19:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x40087602, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x5}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 531.582543][ C1] sd 0:0:1:0: [sda] tag#372 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.592846][ C1] sd 0:0:1:0: [sda] tag#372 CDB: opcode=0xe5 (vendor) [ 531.599619][ C1] sd 0:0:1:0: [sda] tag#372 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 531.609111][ C1] sd 0:0:1:0: [sda] tag#372 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 531.618588][ C1] sd 0:0:1:0: [sda] tag#372 CDB[20]: ba 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x7}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x8}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x401c5820, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x9}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0xea7d, @mcast2, 0x9}, 0x1c) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) write(r2, &(0x7f0000000040)="ff58c6ff66ecdcb0071df547cdb93f725d255dedccc195bcf0db0a54b95e489e67bb56cdf9a487eea731cb03dfd030ce73c2c3f69a4553dc760e7ad1ff4199b14a2ac3ab21e5f7591c80993c42073cf08c7f9558be5d1d4038e1c99e037af0d9d7e6a146f2b7cda19632433463679adb2188b40fdbddcfc8f5b6608a18d3b6657f08c300e6cde494f1cf0ba69e79b3ce62a143888ee95532f4bda50b07feeebd7456c2f8f47fedb304ae6032224fb14d5f113dfcd8ca0a31d0c874c37308a265f0b2294bfe08ee1475a0ea4c0839a790f7d88a4e7598e3ca8889180db78f69903f412c6976290939", 0xe8) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r2, 0x0, 0x201012) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xf}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r0, 0x68f05000) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) fallocate(0xffffffffffffffff, 0x4, 0x7d29, 0x3) 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x4020940d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 531.986244][ C0] sd 0:0:1:0: [sda] tag#320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 531.996561][ C0] sd 0:0:1:0: [sda] tag#320 CDB: opcode=0xe5 (vendor) [ 532.003364][ C0] sd 0:0:1:0: [sda] tag#320 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 532.012860][ C0] sd 0:0:1:0: [sda] tag#320 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 532.022370][ C0] sd 0:0:1:0: [sda] tag#320 CDB[20]: ba 12:19:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x7, 0x1, 0x2, 0x3f}) pipe(&(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r4, 0x0, &(0x7f00000001c0)={{r5, r6/1000+60000}, {0x0, 0x2710}}, 0x0) close(r1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x9, 0x88, 0x8, 0x4, 0xffffff7a, 0x29}) sendfile(r0, r1, 0x0, 0x201012) [ 532.085844][ T24] audit: type=1400 audit(1642681180.828:493): avc: denied { ioctl } for pid=15059 comm="syz-executor.2" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 12:19:40 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ftruncate(r1, 0x400) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r2, 0x7de000) write(r0, &(0x7f0000000140)="d5", 0x1) r3 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendto$isdn(r4, &(0x7f0000000500)={0x71, 0x2, "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"}, 0x14f, 0x80, &(0x7f0000000100)={0x22, 0x5, 0x0, 0x81, 0x2}, 0x6) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x100000006, 0x40000006) 12:19:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x44}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x7, 0x1, 0x2, 0x3f}) (async) pipe(&(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r4, 0x0, &(0x7f00000001c0)={{r5, r6/1000+60000}, {0x0, 0x2710}}, 0x0) close(r1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) getsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x9, 0x88, 0x8, 0x4, 0xffffff7a, 0x29}) sendfile(r0, r1, 0x0, 0x201012) 12:19:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:40 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x80086601, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 532.195849][ T24] audit: type=1400 audit(1642681180.938:494): avc: denied { map } for pid=15063 comm="syz-executor.3" path="socket:[126606]" dev="sockfs" ino=126606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 532.199039][ C1] sd 0:0:1:0: [sda] tag#339 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x48}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x80087601, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x7, 0x1, 0x2, 0x3f}) (async) pipe(&(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r4, 0x0, &(0x7f00000001c0)={{r5, r6/1000+60000}, {0x0, 0x2710}}, 0x0) close(r1) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) getsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x9, 0x88, 0x8, 0x4, 0xffffff7a, 0x29}) (async) sendfile(r0, r1, 0x0, 0x201012) 12:19:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) [ 532.220683][ T24] audit: type=1400 audit(1642681180.938:495): avc: denied { read } for pid=15063 comm="syz-executor.3" path="socket:[126606]" dev="sockfs" ino=126606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 532.230878][ C1] sd 0:0:1:0: [sda] tag#339 CDB: opcode=0xe5 (vendor) [ 532.262297][ C1] sd 0:0:1:0: [sda] tag#339 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 532.271792][ C1] sd 0:0:1:0: [sda] tag#339 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 532.281274][ C1] sd 0:0:1:0: [sda] tag#339 CDB[20]: ba 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x60}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:41 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async, rerun: 64) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ftruncate(r1, 0x400) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r2, 0x7de000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r3 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendto$isdn(r4, &(0x7f0000000500)={0x71, 0x2, "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"}, 0x14f, 0x80, &(0x7f0000000100)={0x22, 0x5, 0x0, 0x81, 0x2}, 0x6) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x100000006, 0x40000006) 12:19:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:41 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x801c581f, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x88}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x253}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x300}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc0045878, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x500}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:41 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ftruncate(r1, 0x400) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r2, 0x7de000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r3 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) sendto$isdn(r4, &(0x7f0000000500)={0x71, 0x2, "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"}, 0x14f, 0x80, &(0x7f0000000100)={0x22, 0x5, 0x0, 0x81, 0x2}, 0x6) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r3, 0x0, 0x100000006, 0x40000006) 12:19:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x600}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x0) 12:19:42 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc0045878, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100)="21f98a712e916f863890f75dacf40bc5a426fc7c72c56f", &(0x7f0000000180)=""/99, 0x4}, 0x20) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x80087601, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x700}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x900}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 533.413107][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 533.413138][ C1] sd 0:0:1:0: [sda] tag#331 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.430034][ C1] sd 0:0:1:0: [sda] tag#331 CDB: opcode=0xe5 (vendor) [ 533.436830][ C1] sd 0:0:1:0: [sda] tag#331 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 533.446327][ C1] sd 0:0:1:0: [sda] tag#331 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 533.455813][ C1] sd 0:0:1:0: [sda] tag#331 CDB[20]: ba 12:19:42 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100)="21f98a712e916f863890f75dacf40bc5a426fc7c72c56f", &(0x7f0000000180)=""/99, 0x4}, 0x20) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x80087601, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xf00}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) close(r0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:42 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc0189436, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x1400}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 533.535149][ C0] sd 0:0:1:0: [sda] tag#346 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.545478][ C0] sd 0:0:1:0: [sda] tag#346 CDB: opcode=0xe5 (vendor) [ 533.552284][ C0] sd 0:0:1:0: [sda] tag#346 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 533.561775][ C0] sd 0:0:1:0: [sda] tag#346 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 533.571284][ C0] sd 0:0:1:0: [sda] tag#346 CDB[20]: ba 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x4400}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:42 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100)="21f98a712e916f863890f75dacf40bc5a426fc7c72c56f", &(0x7f0000000180)=""/99, 0x4}, 0x20) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100)="21f98a712e916f863890f75dacf40bc5a426fc7c72c56f", &(0x7f0000000180)=""/99, 0x4}, 0x20) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) [ 533.675007][ C1] sd 0:0:1:0: [sda] tag#361 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.685333][ C1] sd 0:0:1:0: [sda] tag#361 CDB: opcode=0xe5 (vendor) [ 533.692131][ C1] sd 0:0:1:0: [sda] tag#361 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 533.701621][ C1] sd 0:0:1:0: [sda] tag#361 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 533.711103][ C1] sd 0:0:1:0: [sda] tag#361 CDB[20]: ba 12:19:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x80087601, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc020660b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x4800}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:42 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x7149, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) write(r5, &(0x7f0000000140)="d5", 0x1) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:19:42 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x7149, 0x0, 0x0, 0x0, 0x0) (async) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r5, 0x20, 0x0, 0xfffffeff000) (async) write(r5, &(0x7f0000000140)="d5", 0x1) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:19:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x5302}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xfffffffc) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7}, 0x1) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) io_uring_enter(r0, 0x7149, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) (async) write(r5, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc0189436, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:43 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x8800}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) r3 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r4, "d3ca461607bbe1de2b277b0b80fec62e"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r3}, 0x0, 0xe, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000000000000000900000000000000039b0000002300005200000000000000f8ffffffff0000000000000000000000000000000800000000000000f00571e11783ff"]}, @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000011c0)={0x8, 0x4, {0x10001, @struct={0x8, 0x5}, 0x0, 0x8001, 0x0, 0x0, 0x5, 0x8, 0x43e, @usage=0x2743eefd, 0xe6, 0x2, [0x401, 0x27, 0x800, 0x3f, 0x7f, 0x3ff]}, {0x1, @usage=0x1, 0x0, 0x6, 0x2, 0x2000000000000000, 0x7fff, 0x2, 0x0, @usage=0x4, 0x80000000, 0x6, [0xfffe000000000, 0x3, 0x3, 0x1, 0xfff, 0x6]}, {0x785803ab, @usage=0x7, r4, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x0, @struct={0x401, 0x3}, 0xb10f, 0x9, [0x7803, 0x3, 0x2, 0x9, 0x5, 0xfffffffffffff001]}, {0x101, 0x1ba00, 0xffffffff}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) move_mount(r5, &(0x7f0000000040)='./bus\x00', r6, &(0x7f0000000080)='./bus\x00', 0x34) 12:19:43 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0x670, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xff01}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0xc0189436, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:43 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 534.616098][ C1] sd 0:0:1:0: [sda] tag#332 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 534.626404][ C1] sd 0:0:1:0: [sda] tag#332 CDB: opcode=0xe5 (vendor) [ 534.633208][ C1] sd 0:0:1:0: [sda] tag#332 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 534.642713][ C1] sd 0:0:1:0: [sda] tag#332 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 534.652198][ C1] sd 0:0:1:0: [sda] tag#332 CDB[20]: ba 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x4000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x201012) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x5000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r4, "d3ca461607bbe1de2b277b0b80fec62e"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r3}, 0x0, 0xe, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000000000000000900000000000000039b0000002300005200000000000000f8ffffffff0000000000000000000000000000000800000000000000f00571e11783ff"]}, @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000011c0)={0x8, 0x4, {0x10001, @struct={0x8, 0x5}, 0x0, 0x8001, 0x0, 0x0, 0x5, 0x8, 0x43e, @usage=0x2743eefd, 0xe6, 0x2, [0x401, 0x27, 0x800, 0x3f, 0x7f, 0x3ff]}, {0x1, @usage=0x1, 0x0, 0x6, 0x2, 0x2000000000000000, 0x7fff, 0x2, 0x0, @usage=0x4, 0x80000000, 0x6, [0xfffe000000000, 0x3, 0x3, 0x1, 0xfff, 0x6]}, {0x785803ab, @usage=0x7, r4, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x0, @struct={0x401, 0x3}, 0xb10f, 0x9, [0x7803, 0x3, 0x2, 0x9, 0x5, 0xfffffffffffff001]}, {0x101, 0x1ba00, 0xffffffff}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) move_mount(r5, &(0x7f0000000040)='./bus\x00', r6, &(0x7f0000000080)='./bus\x00', 0x34) 12:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:43 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:43 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:44 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async, rerun: 32) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async, rerun: 32) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async, rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) lseek(r1, 0x670, 0x3) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) fallocate(r1, 0x0, 0x100000006, 0x40000006) (rerun: 32) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x7000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x401c5820, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) r3 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r4, "d3ca461607bbe1de2b277b0b80fec62e"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r3}, 0x0, 0xe, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000000000000000900000000000000039b0000002300005200000000000000f8ffffffff0000000000000000000000000000000800000000000000f00571e11783ff"]}, @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000011c0)={0x8, 0x4, {0x10001, @struct={0x8, 0x5}, 0x0, 0x8001, 0x0, 0x0, 0x5, 0x8, 0x43e, @usage=0x2743eefd, 0xe6, 0x2, [0x401, 0x27, 0x800, 0x3f, 0x7f, 0x3ff]}, {0x1, @usage=0x1, 0x0, 0x6, 0x2, 0x2000000000000000, 0x7fff, 0x2, 0x0, @usage=0x4, 0x80000000, 0x6, [0xfffe000000000, 0x3, 0x3, 0x1, 0xfff, 0x6]}, {0x785803ab, @usage=0x7, r4, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x0, @struct={0x401, 0x3}, 0xb10f, 0x9, [0x7803, 0x3, 0x2, 0x9, 0x5, 0xfffffffffffff001]}, {0x101, 0x1ba00, 0xffffffff}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) move_mount(r5, &(0x7f0000000040)='./bus\x00', r6, &(0x7f0000000080)='./bus\x00', 0x34) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r4, "d3ca461607bbe1de2b277b0b80fec62e"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r3}, 0x0, 0xe, @inherit={0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000000000000000900000000000000039b0000002300005200000000000000f8ffffffff0000000000000000000000000000000800000000000000f00571e11783ff"]}, @devid=r4}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000011c0)={0x8, 0x4, {0x10001, @struct={0x8, 0x5}, 0x0, 0x8001, 0x0, 0x0, 0x5, 0x8, 0x43e, @usage=0x2743eefd, 0xe6, 0x2, [0x401, 0x27, 0x800, 0x3f, 0x7f, 0x3ff]}, {0x1, @usage=0x1, 0x0, 0x6, 0x2, 0x2000000000000000, 0x7fff, 0x2, 0x0, @usage=0x4, 0x80000000, 0x6, [0xfffe000000000, 0x3, 0x3, 0x1, 0xfff, 0x6]}, {0x785803ab, @usage=0x7, r4, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x0, @struct={0x401, 0x3}, 0xb10f, 0x9, [0x7803, 0x3, 0x2, 0x9, 0x5, 0xfffffffffffff001]}, {0x101, 0x1ba00, 0xffffffff}}) (async) pipe(&(0x7f0000000040)) (async) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) move_mount(r5, &(0x7f0000000040)='./bus\x00', r6, &(0x7f0000000080)='./bus\x00', 0x34) (async) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x8000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x9000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xf000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 535.487729][ C1] sd 0:0:1:0: [sda] tag#342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.498054][ C1] sd 0:0:1:0: [sda] tag#342 CDB: opcode=0xe5 (vendor) [ 535.504865][ C1] sd 0:0:1:0: [sda] tag#342 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 535.514364][ C1] sd 0:0:1:0: [sda] tag#342 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 535.523847][ C1] sd 0:0:1:0: [sda] tag#342 CDB[20]: ba 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x14000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0x670, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lseek(r1, 0x670, 0x3) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 535.543840][ C1] sd 0:0:1:0: [sda] tag#343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.554163][ C1] sd 0:0:1:0: [sda] tag#343 CDB: opcode=0xe5 (vendor) [ 535.560943][ C1] sd 0:0:1:0: [sda] tag#343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 535.570439][ C1] sd 0:0:1:0: [sda] tag#343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 535.579923][ C1] sd 0:0:1:0: [sda] tag#343 CDB[20]: ba [ 535.631085][ C1] sd 0:0:1:0: [sda] tag#354 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 535.641480][ C1] sd 0:0:1:0: [sda] tag#354 CDB: opcode=0xe5 (vendor) [ 535.648266][ C1] sd 0:0:1:0: [sda] tag#354 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 535.657756][ C1] sd 0:0:1:0: [sda] tag#354 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 535.667246][ C1] sd 0:0:1:0: [sda] tag#354 CDB[20]: ba 12:19:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:44 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x44000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:44 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x48000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x53020000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 536.113576][ C0] sd 0:0:1:0: [sda] tag#369 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.123885][ C0] sd 0:0:1:0: [sda] tag#369 CDB: opcode=0xe5 (vendor) [ 536.130663][ C0] sd 0:0:1:0: [sda] tag#369 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 536.140191][ C0] sd 0:0:1:0: [sda] tag#369 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 536.149690][ C0] sd 0:0:1:0: [sda] tag#369 CDB[20]: ba 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x88000000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x9effffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:45 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) 12:19:45 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xefffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:45 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) (async) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:45 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xf0ffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 537.002382][ C0] sd 0:0:1:0: [sda] tag#325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.012736][ C0] sd 0:0:1:0: [sda] tag#325 CDB: opcode=0xe5 (vendor) [ 537.019506][ C0] sd 0:0:1:0: [sda] tag#325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 537.029000][ C0] sd 0:0:1:0: [sda] tag#325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 537.038493][ C0] sd 0:0:1:0: [sda] tag#325 CDB[20]: ba 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000081) 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xff010000}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000081) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$FICLONE(r2, 0x40049409, r3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000081) (async) 12:19:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xffffff7f}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:46 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00 ']}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xffffff9e}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$FICLONE(r2, 0x40049409, r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000081) 12:19:46 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async, rerun: 32) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) (rerun: 64) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffef}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50100020}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x1f8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb5, 0x7, 0x1, 0x0, "4128abcb8cc38ed8a7d2815ce4e28914cd3639222dbe7999106457d6a359632040a7771c544e77e85973ce4b0aec69754a13c7407a0cb9bbaed0d58c459789485f8b73b6db86c96e478d334a436c9af5adf6b47e4a0dcd2c063a7002539c915b9b8177060f8bf9f87af3664705d04389c674035ffae9fa184ebbb59ae0b74a9b13e30d4fc70ccb94934698ae950a7793e52d8864dc7fe2aa5290291cbe0729e65ede29cad5e749199c5aa5b11cbab48a3d"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x66, 0x6, "05a917a3d663b8a5bdb05496619fa6f0e73588a8fb588c6c6baef8bb9b634f7d8e73ec87599ab2ed890de2214b720ef468e6b6f285b71a06d182614b0f26f543c4f56157972bf14a22ab6cd6407e6b75c939143c0b9ec1ce951953f4fa61b6fb68e7"}]}, @NFT_MSG_DELFLOWTABLE={0x12c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xcc, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "8f313858eda189a131d962e8107e27c5bbd4c27eb49305b1b38d9a03e56dae8398aea9ea65348a59b2ea8114053e87e0a50b41e6942c3c2646655a9972e869bdefffe1d82af4638e6825abe5040049695142517e2f5ab9517fa0151f1f3d16e5f0dd3fded8d96ea65e37bddfb5f10584d688e208af679ca1e81da479e8a97c10b969dfe1c6c69b578d20be03c9ef818fcd65"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x81}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x548}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendfile(r0, r1, 0x0, 0x201012) [ 537.965960][ C0] sd 0:0:1:0: [sda] tag#336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.976352][ C0] sd 0:0:1:0: [sda] tag#336 CDB: opcode=0xe5 (vendor) [ 537.983148][ C0] sd 0:0:1:0: [sda] tag#336 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 537.992631][ C0] sd 0:0:1:0: [sda] tag#336 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 538.002114][ C0] sd 0:0:1:0: [sda] tag#336 CDB[20]: ba 12:19:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xfffffff0}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:46 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e0000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:47 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000340), &(0x7f0000000440)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$qrtr(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/215, 0xd7}], 0x4, &(0x7f0000000780)=[{0xd0, 0x0, 0x0, ""/189}], 0xd0}, 0x38, 0x3003) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000ff00000004000400050006000000000008000300030000000500050004000000c36d93c050eee0c908f7f33f3332b97f32d7fad2083165125b63e9af5470b363814834f7506fc77a0b5123538702ce3073b431bf9141d0d1b33a83cecb8f394677a511571837444b2b17fc2ca7e3505361f03b8707d1"], 0x30}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="020029bd700500dbdf250300000005000500bf000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x20) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0f0000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 539.003478][ C1] scsi_io_completion_action: 64 callbacks suppressed [ 539.003512][ C1] sd 0:0:1:0: [sda] tag#381 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 539.020544][ C1] sd 0:0:1:0: [sda] tag#381 CDB: opcode=0xe5 (vendor) [ 539.027336][ C1] sd 0:0:1:0: [sda] tag#381 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 539.036832][ C1] sd 0:0:1:0: [sda] tag#381 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 539.046324][ C1] sd 0:0:1:0: [sda] tag#381 CDB[20]: ba 12:19:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 539.052246][T15510] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 539.062220][ T24] audit: type=1400 audit(1642681187.808:496): avc: denied { relabelto } for pid=15508 comm="syz-executor.3" name="" dev="pipefs" ino=129234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:watchdog_device_t:s0" [ 539.536820][T15504] syz-executor.4 (15504) used greatest stack depth: 9936 bytes left [ 540.346917][T15524] lo speed is unknown, defaulting to 1000 [ 540.383087][T15524] chnl_net:caif_netlink_parms(): no params data found [ 540.411651][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.418685][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.426632][T15524] device bridge_slave_0 entered promiscuous mode [ 540.433943][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.440996][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.448685][T15524] device bridge_slave_1 entered promiscuous mode [ 540.464754][T15524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.474800][T15524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.491381][T15524] team0: Port device team_slave_0 added [ 540.497895][T15524] team0: Port device team_slave_1 added [ 540.510583][T15524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.517554][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.543845][T15524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.556239][T15524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.563243][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.589179][T15524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.609931][T15524] device hsr_slave_0 entered promiscuous mode [ 540.616440][T15524] device hsr_slave_1 entered promiscuous mode [ 540.622784][T15524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.630320][T15524] Cannot create hsr debugfs directory [ 540.659016][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.666065][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.673282][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.680283][T15524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.707611][T15524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.717568][T19223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.726644][T19223] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.734304][T19223] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.744096][T19223] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 540.754981][T15524] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.764058][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.772424][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.779483][T10596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.789283][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.797601][T19221] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.804664][T19221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.822681][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.831570][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.839975][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.848478][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.858442][T15524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.869340][T15524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 540.878034][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.890291][T15524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.898194][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.906699][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.971875][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.013159][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.022565][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.030188][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.038684][T15524] device veth0_vlan entered promiscuous mode [ 541.047763][T15524] device veth1_vlan entered promiscuous mode [ 541.059126][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 541.068896][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 541.077040][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.087441][T15524] device veth0_macvtap entered promiscuous mode [ 541.095698][T15524] device veth1_macvtap entered promiscuous mode [ 541.106797][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.117312][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.127222][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.137704][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.147573][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.158062][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.167908][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.178339][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.188174][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.198650][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.208503][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 541.218926][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.229948][T15524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.238355][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.247509][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 541.257792][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.268238][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.278110][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.288551][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.298374][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.308874][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.318743][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.329168][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.339047][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.349542][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50100020}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x1f8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb5, 0x7, 0x1, 0x0, "4128abcb8cc38ed8a7d2815ce4e28914cd3639222dbe7999106457d6a359632040a7771c544e77e85973ce4b0aec69754a13c7407a0cb9bbaed0d58c459789485f8b73b6db86c96e478d334a436c9af5adf6b47e4a0dcd2c063a7002539c915b9b8177060f8bf9f87af3664705d04389c674035ffae9fa184ebbb59ae0b74a9b13e30d4fc70ccb94934698ae950a7793e52d8864dc7fe2aa5290291cbe0729e65ede29cad5e749199c5aa5b11cbab48a3d"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x66, 0x6, "05a917a3d663b8a5bdb05496619fa6f0e73588a8fb588c6c6baef8bb9b634f7d8e73ec87599ab2ed890de2214b720ef468e6b6f285b71a06d182614b0f26f543c4f56157972bf14a22ab6cd6407e6b75c939143c0b9ec1ce951953f4fa61b6fb68e7"}]}, @NFT_MSG_DELFLOWTABLE={0x12c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xcc, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "8f313858eda189a131d962e8107e27c5bbd4c27eb49305b1b38d9a03e56dae8398aea9ea65348a59b2ea8114053e87e0a50b41e6942c3c2646655a9972e869bdefffe1d82af4638e6825abe5040049695142517e2f5ab9517fa0151f1f3d16e5f0dd3fded8d96ea65e37bddfb5f10584d688e208af679ca1e81da479e8a97c10b969dfe1c6c69b578d20be03c9ef818fcd65"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x81}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x548}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendfile(r0, r1, 0x0, 0x201012) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async, rerun: 64) fsetxattr$security_selinux(r3, &(0x7f0000000340), &(0x7f0000000440)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x1) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$qrtr(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/215, 0xd7}], 0x4, &(0x7f0000000780)=[{0xd0, 0x0, 0x0, ""/189}], 0xd0}, 0x38, 0x3003) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000ff00000004000400050006000000000008000300030000000500050004000000c36d93c050eee0c908f7f33f3332b97f32d7fad2083165125b63e9af5470b363814834f7506fc77a0b5123538702ce3073b431bf9141d0d1b33a83cecb8f394677a511571837444b2b17fc2ca7e3505361f03b8707d1"], 0x30}}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="020029bd700500dbdf250300000005000500bf000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x20) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 541.359353][T15524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 541.369775][T15524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.380866][T15524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.389072][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (rerun: 64) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50100020}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x1f8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb5, 0x7, 0x1, 0x0, "4128abcb8cc38ed8a7d2815ce4e28914cd3639222dbe7999106457d6a359632040a7771c544e77e85973ce4b0aec69754a13c7407a0cb9bbaed0d58c459789485f8b73b6db86c96e478d334a436c9af5adf6b47e4a0dcd2c063a7002539c915b9b8177060f8bf9f87af3664705d04389c674035ffae9fa184ebbb59ae0b74a9b13e30d4fc70ccb94934698ae950a7793e52d8864dc7fe2aa5290291cbe0729e65ede29cad5e749199c5aa5b11cbab48a3d"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x66, 0x6, "05a917a3d663b8a5bdb05496619fa6f0e73588a8fb588c6c6baef8bb9b634f7d8e73ec87599ab2ed890de2214b720ef468e6b6f285b71a06d182614b0f26f543c4f56157972bf14a22ab6cd6407e6b75c939143c0b9ec1ce951953f4fa61b6fb68e7"}]}, @NFT_MSG_DELFLOWTABLE={0x12c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xcc, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "8f313858eda189a131d962e8107e27c5bbd4c27eb49305b1b38d9a03e56dae8398aea9ea65348a59b2ea8114053e87e0a50b41e6942c3c2646655a9972e869bdefffe1d82af4638e6825abe5040049695142517e2f5ab9517fa0151f1f3d16e5f0dd3fded8d96ea65e37bddfb5f10584d688e208af679ca1e81da479e8a97c10b969dfe1c6c69b578d20be03c9ef818fcd65"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x81}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x548}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (rerun: 64) sendfile(r0, r1, 0x0, 0x201012) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x906, @local, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="9327acdbebafd1ee7868dbb63f7eb130c25bacd1bca0933a33c7d7b1f816912c0591e3e8f67bb0d25e04f56d344b53a42bc76f18915762f42d55895272a445e0", 0x40, 0xe0800}, {&(0x7f00000001c0)="cbe5eb3af39ec2cd0939620374cbdcb5af021a1fb48abad0957dd5ac067bb178b9f0eed8e0f1b6767b97132616c4272384bbc8946690f75833202ea68331d7f7bdd8abc745c0b5b53bd27808e3f37a534f348bb59b00ec7536cdab8a9d8d20a47992b59c36ba509853da3d043b89388786007ed2502b5c30bd26654609ff0ea40495a48593ff42f75f20e8b313c9c59ea4c130de052517459fe5f990c3a7fc0bc9ea91ba8fcea6041de0", 0xaa, 0x8001}, {&(0x7f0000000100)="1920e1c63851e05110d3584350b939efb5c06572cc80997d745003c8da50ec3566446c0485da6164c15247c8cecabd1ea6992adbaf7c491d80d562bce019faabbc2cf9af6cad0444ce7ea85a88eefb3adb6134e041", 0x55, 0x2}], 0x40809, &(0x7f0000000300)={[{@dots}], [{@context={'context', 0x3d, 'user_u'}}, {@subj_user}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}) openat(r3, &(0x7f0000000340)='./bus\x00', 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x201012) [ 541.467798][ C0] sd 0:0:1:0: [sda] tag#335 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 541.478114][ C0] sd 0:0:1:0: [sda] tag#335 CDB: opcode=0xe5 (vendor) [ 541.484935][ C0] sd 0:0:1:0: [sda] tag#335 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 541.494424][ C0] sd 0:0:1:0: [sda] tag#335 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 541.503915][ C0] sd 0:0:1:0: [sda] tag#335 CDB[20]: ba 12:19:50 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) fsetxattr$security_selinux(r3, &(0x7f0000000340), &(0x7f0000000440)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) recvmsg$qrtr(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/215, 0xd7}], 0x4, &(0x7f0000000780)=[{0xd0, 0x0, 0x0, ""/189}], 0xd0}, 0x38, 0x3003) (async, rerun: 64) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000ff00000004000400050006000000000008000300030000000500050004000000c36d93c050eee0c908f7f33f3332b97f32d7fad2083165125b63e9af5470b363814834f7506fc77a0b5123538702ce3073b431bf9141d0d1b33a83cecb8f394677a511571837444b2b17fc2ca7e3505361f03b8707d1"], 0x30}}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="020029bd700500dbdf250300000005000500bf000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x20) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="110000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x906, @local, 0x3}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="9327acdbebafd1ee7868dbb63f7eb130c25bacd1bca0933a33c7d7b1f816912c0591e3e8f67bb0d25e04f56d344b53a42bc76f18915762f42d55895272a445e0", 0x40, 0xe0800}, {&(0x7f00000001c0)="cbe5eb3af39ec2cd0939620374cbdcb5af021a1fb48abad0957dd5ac067bb178b9f0eed8e0f1b6767b97132616c4272384bbc8946690f75833202ea68331d7f7bdd8abc745c0b5b53bd27808e3f37a534f348bb59b00ec7536cdab8a9d8d20a47992b59c36ba509853da3d043b89388786007ed2502b5c30bd26654609ff0ea40495a48593ff42f75f20e8b313c9c59ea4c130de052517459fe5f990c3a7fc0bc9ea91ba8fcea6041de0", 0xaa, 0x8001}, {&(0x7f0000000100)="1920e1c63851e05110d3584350b939efb5c06572cc80997d745003c8da50ec3566446c0485da6164c15247c8cecabd1ea6992adbaf7c491d80d562bce019faabbc2cf9af6cad0444ce7ea85a88eefb3adb6134e041", 0x55, 0x2}], 0x40809, &(0x7f0000000300)={[{@dots}], [{@context={'context', 0x3d, 'user_u'}}, {@subj_user}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}) openat(r3, &(0x7f0000000340)='./bus\x00', 0x8000, 0x0) (async) sendfile(r0, r1, 0x0, 0x201012) [ 541.507728][ C1] sd 0:0:1:0: [sda] tag#339 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 541.519703][ C1] sd 0:0:1:0: [sda] tag#339 CDB: opcode=0xe5 (vendor) [ 541.526488][ C1] sd 0:0:1:0: [sda] tag#339 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 541.535990][ C1] sd 0:0:1:0: [sda] tag#339 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 541.545468][ C1] sd 0:0:1:0: [sda] tag#339 CDB[20]: ba 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (rerun: 32) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x906, @local, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="9327acdbebafd1ee7868dbb63f7eb130c25bacd1bca0933a33c7d7b1f816912c0591e3e8f67bb0d25e04f56d344b53a42bc76f18915762f42d55895272a445e0", 0x40, 0xe0800}, {&(0x7f00000001c0)="cbe5eb3af39ec2cd0939620374cbdcb5af021a1fb48abad0957dd5ac067bb178b9f0eed8e0f1b6767b97132616c4272384bbc8946690f75833202ea68331d7f7bdd8abc745c0b5b53bd27808e3f37a534f348bb59b00ec7536cdab8a9d8d20a47992b59c36ba509853da3d043b89388786007ed2502b5c30bd26654609ff0ea40495a48593ff42f75f20e8b313c9c59ea4c130de052517459fe5f990c3a7fc0bc9ea91ba8fcea6041de0", 0xaa, 0x8001}, {&(0x7f0000000100)="1920e1c63851e05110d3584350b939efb5c06572cc80997d745003c8da50ec3566446c0485da6164c15247c8cecabd1ea6992adbaf7c491d80d562bce019faabbc2cf9af6cad0444ce7ea85a88eefb3adb6134e041", 0x55, 0x2}], 0x40809, &(0x7f0000000300)={[{@dots}], [{@context={'context', 0x3d, 'user_u'}}, {@subj_user}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}) openat(r3, &(0x7f0000000340)='./bus\x00', 0x8000, 0x0) (async) sendfile(r0, r1, 0x0, 0x201012) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 541.624635][ C1] sd 0:0:1:0: [sda] tag#350 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 541.634948][ C1] sd 0:0:1:0: [sda] tag#350 CDB: opcode=0xe5 (vendor) [ 541.641763][ C1] sd 0:0:1:0: [sda] tag#350 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 541.651241][ C1] sd 0:0:1:0: [sda] tag#350 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 541.660716][ C1] sd 0:0:1:0: [sda] tag#350 CDB[20]: ba 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x220000, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xfffa, 0x8, @private1, 0xffffff00}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 541.765357][ T24] audit: type=1400 audit(1642681190.508:497): avc: denied { write } for pid=15628 comm="syz-executor.2" name="net" dev="proc" ino=128854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 541.787400][ T24] audit: type=1400 audit(1642681190.508:498): avc: denied { add_name } for pid=15628 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 541.807848][ T24] audit: type=1400 audit(1642681190.508:499): avc: denied { create } for pid=15628 comm="syz-executor.2" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 541.828205][ T24] audit: type=1400 audit(1642681190.508:500): avc: denied { associate } for pid=15628 comm="syz-executor.2" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 12:19:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:50 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x4) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) mknodat$loop(r3, &(0x7f00000001c0)='./bus\x00', 0x40, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './bus\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000180)={0x25, ""/37}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7f, 0x2}}, './bus\x00'}) openat2(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x60082, 0x11, 0x12}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x220000, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xfffa, 0x8, @private1, 0xffffff00}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x220000, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xfffa, 0x8, @private1, 0xffffff00}, 0x1c) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x220000, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xfffa, 0x8, @private1, 0xffffff00}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x220000, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xfffa, 0x8, @private1, 0xffffff00}, 0x1c) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) [ 542.043997][ C1] sd 0:0:1:0: [sda] tag#380 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.054324][ C1] sd 0:0:1:0: [sda] tag#380 CDB: opcode=0xe5 (vendor) [ 542.061136][ C1] sd 0:0:1:0: [sda] tag#380 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 542.070615][ C1] sd 0:0:1:0: [sda] tag#380 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 542.080112][ C1] sd 0:0:1:0: [sda] tag#380 CDB[20]: ba [ 542.101916][ C0] sd 0:0:1:0: [sda] tag#382 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.112227][ C0] sd 0:0:1:0: [sda] tag#382 CDB: opcode=0xe5 (vendor) [ 542.119011][ C0] sd 0:0:1:0: [sda] tag#382 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 542.128551][ C0] sd 0:0:1:0: [sda] tag#382 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 542.138045][ C0] sd 0:0:1:0: [sda] tag#382 CDB[20]: ba 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x44}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x900) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r8, "d3ca461607bbe1de2b277b0b80fec62e"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r6}, 0x0, 0xe, @inherit={0x50, &(0x7f0000002380)=ANY=[@ANYBLOB="010000000000000001000007000000000900000000000000ffffffff000000000000000000000000eb000000000000000000080000000000580034b04a36c8bff32a6a286c011945444f852c9661a9202b9d8b8ed13ea89782f49e72fa95927768766053fd709ea0b6a987a6fd559ffa46d0d7d482cb0f5b1a37df7c7873680b4d57dce51a4791d2cc0eb2cfceec5c3479b08d2969c6b44c63ab6f19768c8481aacf97a2e86e33e4a4eddf8227955c94b1875a9637c7ee934b818eb419"]}, @devid=r8}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000001c0)={{r5}, r2, 0x0, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000010000000100000000000000270000000000837900000500000000000004040000000000000002000000000000000200000000000000080000000000000003000000000000000400000000000000070000000000000000000000000000000000000000000000030000000000"]}, @devid=r8}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6(0xa, 0x80b, 0x1ff) sendfile(r0, r1, 0x0, 0x201012) 12:19:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x48}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:51 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async, rerun: 32) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x4) (rerun: 32) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async, rerun: 64) write(r0, &(0x7f0000000140)="d5", 0x1) (rerun: 64) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) mknodat$loop(r3, &(0x7f00000001c0)='./bus\x00', 0x40, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './bus\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000180)={0x25, ""/37}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) fallocate(r1, 0x0, 0x100000006, 0x40000006) [ 542.322723][ C0] sd 0:0:1:0: [sda] tag#337 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.333059][ C0] sd 0:0:1:0: [sda] tag#337 CDB: opcode=0xe5 (vendor) [ 542.339831][ C0] sd 0:0:1:0: [sda] tag#337 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 542.349323][ C0] sd 0:0:1:0: [sda] tag#337 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 542.358822][ C0] sd 0:0:1:0: [sda] tag#337 CDB[20]: ba 12:19:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x900) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r8, "d3ca461607bbe1de2b277b0b80fec62e"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r6}, 0x0, 0xe, @inherit={0x50, &(0x7f0000002380)=ANY=[@ANYBLOB="010000000000000001000007000000000900000000000000ffffffff000000000000000000000000eb000000000000000000080000000000580034b04a36c8bff32a6a286c011945444f852c9661a9202b9d8b8ed13ea89782f49e72fa95927768766053fd709ea0b6a987a6fd559ffa46d0d7d482cb0f5b1a37df7c7873680b4d57dce51a4791d2cc0eb2cfceec5c3479b08d2969c6b44c63ab6f19768c8481aacf97a2e86e33e4a4eddf8227955c94b1875a9637c7ee934b818eb419"]}, @devid=r8}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000001c0)={{r5}, r2, 0x0, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000010000000100000000000000270000000000837900000500000000000004040000000000000002000000000000000200000000000000080000000000000003000000000000000400000000000000070000000000000000000000000000000000000000000000030000000000"]}, @devid=r8}) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) socket$inet6(0xa, 0x80b, 0x1ff) (async, rerun: 32) sendfile(r0, r1, 0x0, 0x201012) 12:19:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x60}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000100000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:51 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x4) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) mknodat$loop(r3, &(0x7f00000001c0)='./bus\x00', 0x40, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './bus\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000180)={0x25, ""/37}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x88}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 542.719706][ C0] sd 0:0:1:0: [sda] tag#328 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.730023][ C0] sd 0:0:1:0: [sda] tag#328 CDB: opcode=0xe5 (vendor) [ 542.736844][ C0] sd 0:0:1:0: [sda] tag#328 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 542.746366][ C0] sd 0:0:1:0: [sda] tag#328 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 542.755946][ C0] sd 0:0:1:0: [sda] tag#328 CDB[20]: ba 12:19:51 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r1, 0x80000) sendfile(r0, r3, &(0x7f0000000040)=0x9, 0x6) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:51 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000020000060"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 542.834879][ C1] sd 0:0:1:0: [sda] tag#339 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.845200][ C1] sd 0:0:1:0: [sda] tag#339 CDB: opcode=0xe5 (vendor) [ 542.851992][ C1] sd 0:0:1:0: [sda] tag#339 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 542.861472][ C1] sd 0:0:1:0: [sda] tag#339 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 542.870934][ C1] sd 0:0:1:0: [sda] tag#339 CDB[20]: ba [ 543.072244][T15701] ================================================================== [ 543.080362][T15701] BUG: KCSAN: data-race in fib6_clean_node / inet6_csk_route_socket [ 543.088357][T15701] [ 543.090687][T15701] write to 0xffff88813df62e2c of 4 bytes by task 1920 on cpu 1: [ 543.098321][T15701] fib6_clean_node+0xc2/0x260 [ 543.103010][T15701] fib6_walk_continue+0x38e/0x430 [ 543.108041][T15701] __fib6_clean_all+0x1a9/0x2e0 [ 543.112894][T15701] fib6_flush_trees+0x6c/0x80 [ 543.117570][T15701] addrconf_dad_completed+0x57f/0x870 [ 543.122960][T15701] addrconf_dad_work+0x908/0x1170 [ 543.127998][T15701] process_one_work+0x3f6/0x960 [ 543.132866][T15701] worker_thread+0x616/0xa70 [ 543.137465][T15701] kthread+0x1bf/0x1e0 [ 543.141535][T15701] ret_from_fork+0x1f/0x30 [ 543.145953][T15701] [ 543.148276][T15701] read to 0xffff88813df62e2c of 4 bytes by task 15701 on cpu 0: [ 543.155903][T15701] inet6_csk_route_socket+0x352/0x3c0 [ 543.161284][T15701] inet6_csk_xmit+0x91/0x1e0 [ 543.165879][T15701] __tcp_transmit_skb+0x1323/0x1840 [ 543.171091][T15701] tcp_write_xmit+0x1450/0x4460 [ 543.175949][T15701] __tcp_push_pending_frames+0x68/0x1c0 [ 543.181504][T15701] tcp_push+0x2d9/0x2f0 [ 543.185661][T15701] __mptcp_push_pending+0x46c/0x490 [ 543.190867][T15701] mptcp_sendmsg+0x9ec/0xa50 [ 543.195466][T15701] inet6_sendmsg+0x5f/0x80 [ 543.199885][T15701] kernel_sendmsg+0x97/0xd0 [ 543.204392][T15701] sock_no_sendpage+0x84/0xb0 [ 543.209073][T15701] inet_sendpage+0x9d/0xc0 [ 543.213492][T15701] kernel_sendpage+0x187/0x200 [ 543.218261][T15701] sock_sendpage+0x5a/0x70 [ 543.222713][T15701] pipe_to_sendpage+0x128/0x160 [ 543.227580][T15701] __splice_from_pipe+0x207/0x500 [ 543.232619][T15701] generic_splice_sendpage+0x94/0xd0 [ 543.237914][T15701] direct_splice_actor+0x80/0xa0 [ 543.242862][T15701] splice_direct_to_actor+0x345/0x650 [ 543.248245][T15701] do_splice_direct+0x106/0x190 [ 543.253110][T15701] do_sendfile+0x675/0xc40 [ 543.257531][T15701] __x64_sys_sendfile64+0x102/0x140 [ 543.262735][T15701] do_syscall_64+0x44/0xd0 [ 543.267156][T15701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 543.273055][T15701] [ 543.275378][T15701] value changed: 0x0000026f -> 0x00000271 [ 543.281095][T15701] [ 543.283414][T15701] Reported by Kernel Concurrency Sanitizer on: [ 543.289558][T15701] CPU: 0 PID: 15701 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 543.297975][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.308032][T15701] ================================================================== 12:19:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x900) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x24000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000780)={r8, "d3ca461607bbe1de2b277b0b80fec62e"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001380)={{r6}, 0x0, 0xe, @inherit={0x50, &(0x7f0000002380)=ANY=[@ANYBLOB="010000000000000001000007000000000900000000000000ffffffff000000000000000000000000eb000000000000000000080000000000580034b04a36c8bff32a6a286c011945444f852c9661a9202b9d8b8ed13ea89782f49e72fa95927768766053fd709ea0b6a987a6fd559ffa46d0d7d482cb0f5b1a37df7c7873680b4d57dce51a4791d2cc0eb2cfceec5c3479b08d2969c6b44c63ab6f19768c8481aacf97a2e86e33e4a4eddf8227955c94b1875a9637c7ee934b818eb419"]}, @devid=r8}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000001c0)={{r5}, r2, 0x0, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000010000000100000000000000270000000000837900000500000000000004040000000000000002000000000000000200000000000000080000000000000003000000000000000400000000000000070000000000000000000000000000000000000000000000030000000000"]}, @devid=r8}) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) socket$inet6(0xa, 0x80b, 0x1ff) sendfile(r0, r1, 0x0, 0x201012) 12:19:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:52 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="04000000007fffffff"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:52 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r1, 0x80000) sendfile(r0, r3, &(0x7f0000000040)=0x9, 0x6) fallocate(r1, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) dup3(r1, r1, 0x80000) (async) sendfile(r0, r3, &(0x7f0000000040)=0x9, 0x6) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 543.625851][ C1] sd 0:0:1:0: [sda] tag#354 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 543.636169][ C1] sd 0:0:1:0: [sda] tag#354 CDB: opcode=0xe5 (vendor) [ 543.642983][ C1] sd 0:0:1:0: [sda] tag#354 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 543.652463][ C1] sd 0:0:1:0: [sda] tag#354 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 543.661953][ C1] sd 0:0:1:0: [sda] tag#354 CDB[20]: ba 12:19:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:52 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000001000020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:52 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async, rerun: 64) write(r0, &(0x7f0000000140)="d5", 0x1) (async, rerun: 64) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = dup3(r1, r1, 0x80000) (rerun: 32) sendfile(r0, r3, &(0x7f0000000040)=0x9, 0x6) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:52 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000010020"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) [ 544.038290][ C1] sd 0:0:1:0: [sda] tag#368 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 544.048600][ C1] sd 0:0:1:0: [sda] tag#368 CDB: opcode=0xe5 (vendor) [ 544.055402][ C1] sd 0:0:1:0: [sda] tag#368 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 544.064879][ C1] sd 0:0:1:0: [sda] tag#368 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 544.074366][ C1] sd 0:0:1:0: [sda] tag#368 CDB[20]: ba 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x4, @loopback, 0xd}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f00000001c0)="05fb18aaf503389f06bd08760d39c74d70dbab3d370e2b753bde4997315d157d0275e306cf98522bcfdd1e278b21446537d73e609a0fe09361828ae73f119046a59233d127d1f9392dd0f860ae2f99505516caaf673aa4933390515ece2ff36f6adc9abdbdc439f0d3128704ed14cb87c14b6209ffc41743d0fc83173b074a89a5c83a549a1c1b465e53a85efd67866046fa9070d9e4e0578d25a40fd31f64faa8874c1b4785d9a9d3d3490b6d1722ee56ab911b21db97bf680c35c304a00e2a112762f68f1545ad6a557adf75f8345ce262908f76d436c2f20ff53ff0c42544e0a15d5f2f189e85d0e4ff6f764154298ab92e7e946ff037c963f5885502621735ab0249a653f115841c038eea3ebe037e2922dccd859e7fa025bccac3b7d6fc3bc31598d57d13b7f94c9b2aefc8cc587b301fc9f7e454d12369a71a3a6b486ec7ca962052af783539f254f0133fbc4ae082c1ffdba0dd817bb22b589def320425bc2b5538de412432930a2c5676e0ba8a0ddfd6f3ededa5cd5699b6ed13f31c49e00d7190fd6774441c958dde1a5af589f03f9ef8d1b7eae3ae5bcb7f0e6f0eb2f273c4fdb4d79ec3ea4321868e0a058c3010e0d714fab4e51dedb914d4c643486e95d341bda392427442c4e5fecbc24d42625755bb155ea81136d0e27180ddedc4d2792adf26cec9d90656b1b00af3aa485a63223221e932679c73f1cde805b3f39fc2c4a719621938d4c34dc504e52a0c84b9bc599fbce4e4e6d44aa0137b77a7991490e5ea34f7268022fed87cbf764c5894363817c8d268ecd1d3bab5ddf8a960ad35c38a44edffd62d924f21720c575ff4f7efca15cbb669c1125e65c245f92cb6031440e43e83293891653da2dfd0f9626463537c027c2b3b896bf4e32f6e13ae6e4518bd83eb7d25d831792bf38840a8817190c8f6ce04d49e6f600087bcc16770f20ae4bbdb0e09fb195ec5257da1dbffa1470a2f144912517afe75e126edcda41104cec76d21dacee05b888fab7795985800738ec68c7ecb2f87708b8897fc74710274b25170343769d1c7d77e35ac5e0b36b3f36ee8da7516abb37bf764a1e9fcdbf5bc7c72098b14bc3fb1450fc19e5c67816e4ffbd9635bef160c8d0214ce01070a115ec35bcc7ffdf5de08370fe9c7a7dc44ed6671e7231d5d61d4ac88add4bee8add1d7621327e340972728f41d25fb54a7e3882c2ff467561d0fa10647e8054e32cf445400d161e3ec67d5f93ca194e109fa4eecef67617966f568cfdf781b4dc89da61a0455c470134f370a93c3173b262a06b89020a041f68aa89357faa6caba4bbf17145bb9408249bc9d074d738597e634acf92d1d838150d2dab940c57a9e3941a08832358882c0fde0ba91b6d12460240eeec1fca5689c1c0892ffcc459024536b9826251160ca278fce2b5ce5220d1df042a67884b94b43326035a9f99e37906f68801b37e38bd73bb6e3b0c112a93587dd525704ad4718507e42eea9f6b113e1d72f1e3d586ee558d0e460b01b482fa5cd4d5debbab18161ef0f9571b54a431822f217c7a6bc38cebacebdf1504945c930fb2d963336eaec9c3688158c7ca6d5f134da9163a2c95d60e6a5e93319a38ef4144dd88b857c66de26d68b07891d4cc56c27d7c5bf8a9e07f740edb6b56f79d4ba33bd1973fd6cce1d07043afd589907b292ad99567e9f83210f7180240dd2757a1dfe39afffc0b14831b209c01ec51137d0fd537bb3373e0cbcc8f6c975cb0c7d1565f7956f6b25d34f3abda286fc4067edf02da9449e7922c8c31494f9f2daf826adce21329781d80f17c131171809a06c9d025b2642d3a840d80ee84ae1e967f5fc5ed1597b4dbab1772e3484036739dae6b025dcb0a97fb57c6f832fde115fa0a9c6ef6b59cad25912028c7c660f9e143469ef5ee06d25c389df9d25b92ecda592bf0b5e21cb95c37a6dc352d1ddec3bdedc42f7894803b8f66488550a31e14be61f65b7975f67f0b748f674700df1092ce1c295662d86031a796dfb056fe2ca89ac71473873c5e0eebe8d1883a0b7fbcae442681a92c972aee7c22a888d6e09b0bc3a5cc68888704240c5780ea3d75e09660fa93c6245293aac58ad0e2d73b037f3bc4a92af595985669ce37a21d1ed28b52ea0022e3d0e7564c35a171de0a9e37ad63c9b981fed830fd3ac0d4d9338a8f68bbe3ae5f55ea6fdf5dd11462724edeed536df829922de125089d3141fef77bd5bb2140d048cd6d8524372c564de4283cd2d6eb076c546a0c3eec70437700074ed7f398526b87b201f7cbe0d8723ce7fad22bf15161f61c06f0c8d394905891e964714057b57d624a34a302335f1e825f49376cb37adafa8776a2c394f1ea35504be887cbf170cff779c42bd6adcc3de63248575c3f7b865bc861df786aa7146e440010630b730380357497fcd4e2e00cf2f05511adeff2b8e981cbd68006c528597bdac2d71a35be4546d22f1b0e98fe375886238d130c4caa4727b554b76f67d5b5189f0470f3bd515b835548e069cb29b6e2036414973bc5c62c9af8d4239f875bfbda8916ea81ca521886b927258f64b708216a768671cbbef4917257868a10c75eb3f6118a7881b95502984e60d2cc7d8e75c3e49785e4f83d9b2540cecc86ba791783ad9da9ab5c9c02ae43f22a6850112943d7aac3738855f7925252aa6eff56755ef2e4a0b51f6f42e46635b771294cfb7f3850aa8a6b269fd1ba10d02a43df581b31c32d8567b8cdaf9e593c15d885bd5d219987bddabe1d19f46b33c4391aa394cd7568a75b4eb9d19697ca4050b97caab24f38bd43436baac2b71f85878080a1142878098c9fd084e1fd20a1df6259de4b999d054625f2b1d91ab2549a20e66534a9ebfcf135546dff7e73eb5ce1769de059d5459b570301e734905cd2d3792e5290c9e44ead1d35f497c96befe482dead233202a49f9e674f9810132aeb5ab5154c0142be962f94e1834b334bbcf45c5c8b48b033c663d523915ae2ef615f6d2a20cd3756c638296cfe2286404c67ffb49ac87a8035df9d3dacae1e06af7713b3b708a497fac836714fb6085728f8a33027ed3de6516e4a603bf0d8b20985b8dcbd84e1a6c1647409f6e3a7154b3bac754e0219f5ab2fcda6dd213fbe2af1451f2391439eb33049f1ff4d5fb58a8ca9b0d466318aefdf02637ffc3b90a87eea0cfc73ebbf86927a2d21f056e23afb5b9babaf1add2181caca42390929ab63caae431361211cd3ceffbf4d0aabf65061eb80624ddc69affb725db2840bcffce9a1609f59dd883be5e1e42780a1e48169110b8a4ba0152d13fb2cf14536b2cb9d146b6888e4d3ba9cf04dcf78995e687dc151e6487a73fae7045969004beab1655019eca433890f544efecb01c4f2c573f465f69353f1cf1c5cfc858e821ac58eda36652a9306ef06b2cd1165163819edaa2582c7a9296d1fbd0b507d571b2f1a2db8b9a692e8f9acbb42f86e6737dd6a4052a28d1f41f6b542c67dae202cded94a2ee95ea6085973bfd1458150d77ec8efe2a71999965582ac9c5e3cb63ad98f8e518985a0ddd435482af125788c17a74ab776ef024f685c9afd4c34264a462d2eb92106d39ad12013f658119ee6f8856425f0fe1f3e36d83a238376155f8b2dd75437cd9c864b36934c9e134d787aaf38da1de29d3922fead0179bf113285a591991516db80aa1f111bded0a780910736b160beaed78593a7b2a269997fb3ad17bd5ee78dced1ea558844c5e1c278a1cf355f780b368ae698df5b9de54e111804be4a45306127c3a41668756304f972a21c4909ca216e3e9ed2d03c4070ed2f29ab78415dd8ce5ea3083eac2a4b677b957668ed6d06ce2d4e0625e7dfb695079b1d9a0943577b53b3655ccdea881c937412996994759597106def5c20c7fb228ff8873f1461ccc6c252a4b565aede19b77b9f7fe70f18447138f3b32f0e34f454dfa92db076c362538ea4518f51f6cb7b20d316b20368780d4536064c802c17b905799fa14f8838c7778338f0a1f93bf24d85b2bd6b88aea69f783ecbbc6277abbcc5dd693fb350109d585bfa0c9e214130a3f2386d5b64515a25087c1b5b3f5a5a1281cb72968552e4cd5e5ff9d1af2d8a0b3b512dca4448180c4095eebc2a125e8f2cf0372c7cdac06ffd7276a732238ef9fa6a5d8522f0a56b9f282ea21dde0a953ded84be6e8c6e4b698ab8eebe811ff3e2b558bfc2b80c088a86ebb0c785721a9c667c6b0d2c0917fadaa53a896d91a0fe0b0263c85038e3eee8b016f6d9d94d2c70738c585421c305943aa5955812b03058718189d222c00bc084c90bc261222268d0abd38769a76aeafc688557075cc86fa73c0638c13cc48e5e3b30ea648f792f0b77285942c686edbb591bfa502f1325f6d224d525b43963da21879d8bc3369091a0d0c9a7b4f0bae353ad3f22abd81cc19c5e5d6cd17ea63039bcda6247879d098d6f5ab96bb3ef74a0cf654b4821c0024ad0b8d66ad2addb27b8f3654797b19c646d90e62b49c9008df50430411c661335c97e547f7130081c38cb3895d57b047c964ecf76031fc935e8cf3eb93415631856212ec7e4e94e56066bdff771b18743054afcd1fa4d0f9d7ffce4ea25d2f162f3ec77970d38fbbd3f47b7d6d16f32d617eeb8ae56e3e222b91322e3074deea21b3b246e13867169df40c0541e0916d0348200defa5738005e723b5e9f29270df9e9bd5177117ff3f3a2e100901feafaef6b859f175caaf1af5373ce13feb4a2978648aef75ee8ede904718f3374f2cda48779eb19e841f3d9032cfbaa35b8d61209cd5ad3feffd7b87cd8405c4ed033efecf1be60d09cfba4edad88f98af5818ab490cfb8440b8c59c4deeaf971484b12483c0f6b74a71719f68927f5034a4b1afd0914e7062b8839a1ca0daa5c19635656c6b0698dce295d797f2ade32c678ddf063c7f22e7af88042d1c084b6bbf86b4aee8d17eecaed8380670b58af8bdb8b1d574d67d90929afde7c01da5cff6e4dc45c751973e02dd0ce41a2413ee455c6cd4a47d67595fff0c3a850c09bfc4d3e79869df8cc753feaef34a31966b8d998309a8b55e607ff95d09cc7b50b843429f2f1a83c2c4c09618543df0ba283b35b285f6477d76391cb8890903e877b0cf6c9594e3331f47e45fbb4a1e7b5067c9fd75785abaea14dc63a255f648ae18c6d8bb13835d067852ebfd990bff38ae66cb119c63ccf1bdde6096d26a804f21deadd8b27bd73ad1776a9e3e210f0436d1047fc657345a63ea4a5c9bfb886a41b14b2a209cfca59d8b75c5d922a6be867b0b3384556a9b77b03bfb0f6b7e7c035d3875c27a766cf3a5ddb8b038096f18ca131a5c12af30673e0f8c7fecce513e96c6148a1066856fe2de01f9877fd92c8dc9233dda5218028e91964171d55bb8a9486435d679fbb8ebf3f8cec6633a4427e5d317b7737227b9bcae6b66490a9ce24950284d8557387ec7abab2aab67e8810919a0ee127d98b41196c253e3e78ab9203c6a65859fa2cb4ee6ba7de1d3996382b276cd4b49bd3cf065fc2bafe953afea0a641dcd3af0fbff198b4788b88db661aed3849b5d46b281fb069b0aafe7a51f2403122e7b0bb2159d781255ca789a4238c7276a661861bf839276703cde7e49a23165db5397f31c1a163f5616cc624e20d8608bf9212559faca9e10aafd854b2619925f3a55c58b138ba81bd795afa6457147bb2f3190f2cc68474c8d213c4dd410145d20a206a7a10cd0207202ee675762fa721e090aff7fdb9e48160e92fa34", 0x1000) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f0000002200)=ANY=[@ANYRES32=r1], 0x1015, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r5, r4, 0x0, 0x2005) 12:19:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201012) 12:19:53 executing program 3: umount2(&(0x7f0000000100)='./bus\x00', 0x8) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x1e, &(0x7f0000000040)=""/30}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000120"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r0, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0x201012) 12:19:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r0, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0x201012) 12:19:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x4, @loopback, 0xd}, 0x1c) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f00000001c0)="05fb18aaf503389f06bd08760d39c74d70dbab3d370e2b753bde4997315d157d0275e306cf98522bcfdd1e278b21446537d73e609a0fe09361828ae73f119046a59233d127d1f9392dd0f860ae2f99505516caaf673aa4933390515ece2ff36f6adc9abdbdc439f0d3128704ed14cb87c14b6209ffc41743d0fc83173b074a89a5c83a549a1c1b465e53a85efd67866046fa9070d9e4e0578d25a40fd31f64faa8874c1b4785d9a9d3d3490b6d1722ee56ab911b21db97bf680c35c304a00e2a112762f68f1545ad6a557adf75f8345ce262908f76d436c2f20ff53ff0c42544e0a15d5f2f189e85d0e4ff6f764154298ab92e7e946ff037c963f5885502621735ab0249a653f115841c038eea3ebe037e2922dccd859e7fa025bccac3b7d6fc3bc31598d57d13b7f94c9b2aefc8cc587b301fc9f7e454d12369a71a3a6b486ec7ca962052af783539f254f0133fbc4ae082c1ffdba0dd817bb22b589def320425bc2b5538de412432930a2c5676e0ba8a0ddfd6f3ededa5cd5699b6ed13f31c49e00d7190fd6774441c958dde1a5af589f03f9ef8d1b7eae3ae5bcb7f0e6f0eb2f273c4fdb4d79ec3ea4321868e0a058c3010e0d714fab4e51dedb914d4c643486e95d341bda392427442c4e5fecbc24d42625755bb155ea81136d0e27180ddedc4d2792adf26cec9d90656b1b00af3aa485a63223221e932679c73f1cde805b3f39fc2c4a719621938d4c34dc504e52a0c84b9bc599fbce4e4e6d44aa0137b77a7991490e5ea34f7268022fed87cbf764c5894363817c8d268ecd1d3bab5ddf8a960ad35c38a44edffd62d924f21720c575ff4f7efca15cbb669c1125e65c245f92cb6031440e43e83293891653da2dfd0f9626463537c027c2b3b896bf4e32f6e13ae6e4518bd83eb7d25d831792bf38840a8817190c8f6ce04d49e6f600087bcc16770f20ae4bbdb0e09fb195ec5257da1dbffa1470a2f144912517afe75e126edcda41104cec76d21dacee05b888fab7795985800738ec68c7ecb2f87708b8897fc74710274b25170343769d1c7d77e35ac5e0b36b3f36ee8da7516abb37bf764a1e9fcdbf5bc7c72098b14bc3fb1450fc19e5c67816e4ffbd9635bef160c8d0214ce01070a115ec35bcc7ffdf5de08370fe9c7a7dc44ed6671e7231d5d61d4ac88add4bee8add1d7621327e340972728f41d25fb54a7e3882c2ff467561d0fa10647e8054e32cf445400d161e3ec67d5f93ca194e109fa4eecef67617966f568cfdf781b4dc89da61a0455c470134f370a93c3173b262a06b89020a041f68aa89357faa6caba4bbf17145bb9408249bc9d074d738597e634acf92d1d838150d2dab940c57a9e3941a08832358882c0fde0ba91b6d12460240eeec1fca5689c1c0892ffcc459024536b9826251160ca278fce2b5ce5220d1df042a67884b94b43326035a9f99e37906f68801b37e38bd73bb6e3b0c112a93587dd525704ad4718507e42eea9f6b113e1d72f1e3d586ee558d0e460b01b482fa5cd4d5debbab18161ef0f9571b54a431822f217c7a6bc38cebacebdf1504945c930fb2d963336eaec9c3688158c7ca6d5f134da9163a2c95d60e6a5e93319a38ef4144dd88b857c66de26d68b07891d4cc56c27d7c5bf8a9e07f740edb6b56f79d4ba33bd1973fd6cce1d07043afd589907b292ad99567e9f83210f7180240dd2757a1dfe39afffc0b14831b209c01ec51137d0fd537bb3373e0cbcc8f6c975cb0c7d1565f7956f6b25d34f3abda286fc4067edf02da9449e7922c8c31494f9f2daf826adce21329781d80f17c131171809a06c9d025b2642d3a840d80ee84ae1e967f5fc5ed1597b4dbab1772e3484036739dae6b025dcb0a97fb57c6f832fde115fa0a9c6ef6b59cad25912028c7c660f9e143469ef5ee06d25c389df9d25b92ecda592bf0b5e21cb95c37a6dc352d1ddec3bdedc42f7894803b8f66488550a31e14be61f65b7975f67f0b748f674700df1092ce1c295662d86031a796dfb056fe2ca89ac71473873c5e0eebe8d1883a0b7fbcae442681a92c972aee7c22a888d6e09b0bc3a5cc68888704240c5780ea3d75e09660fa93c6245293aac58ad0e2d73b037f3bc4a92af595985669ce37a21d1ed28b52ea0022e3d0e7564c35a171de0a9e37ad63c9b981fed830fd3ac0d4d9338a8f68bbe3ae5f55ea6fdf5dd11462724edeed536df829922de125089d3141fef77bd5bb2140d048cd6d8524372c564de4283cd2d6eb076c546a0c3eec70437700074ed7f398526b87b201f7cbe0d8723ce7fad22bf15161f61c06f0c8d394905891e964714057b57d624a34a302335f1e825f49376cb37adafa8776a2c394f1ea35504be887cbf170cff779c42bd6adcc3de63248575c3f7b865bc861df786aa7146e440010630b730380357497fcd4e2e00cf2f05511adeff2b8e981cbd68006c528597bdac2d71a35be4546d22f1b0e98fe375886238d130c4caa4727b554b76f67d5b5189f0470f3bd515b835548e069cb29b6e2036414973bc5c62c9af8d4239f875bfbda8916ea81ca521886b927258f64b708216a768671cbbef4917257868a10c75eb3f6118a7881b95502984e60d2cc7d8e75c3e49785e4f83d9b2540cecc86ba791783ad9da9ab5c9c02ae43f22a6850112943d7aac3738855f7925252aa6eff56755ef2e4a0b51f6f42e46635b771294cfb7f3850aa8a6b269fd1ba10d02a43df581b31c32d8567b8cdaf9e593c15d885bd5d219987bddabe1d19f46b33c4391aa394cd7568a75b4eb9d19697ca4050b97caab24f38bd43436baac2b71f85878080a1142878098c9fd084e1fd20a1df6259de4b999d054625f2b1d91ab2549a20e66534a9ebfcf135546dff7e73eb5ce1769de059d5459b570301e734905cd2d3792e5290c9e44ead1d35f497c96befe482dead233202a49f9e674f9810132aeb5ab5154c0142be962f94e1834b334bbcf45c5c8b48b033c663d523915ae2ef615f6d2a20cd3756c638296cfe2286404c67ffb49ac87a8035df9d3dacae1e06af7713b3b708a497fac836714fb6085728f8a33027ed3de6516e4a603bf0d8b20985b8dcbd84e1a6c1647409f6e3a7154b3bac754e0219f5ab2fcda6dd213fbe2af1451f2391439eb33049f1ff4d5fb58a8ca9b0d466318aefdf02637ffc3b90a87eea0cfc73ebbf86927a2d21f056e23afb5b9babaf1add2181caca42390929ab63caae431361211cd3ceffbf4d0aabf65061eb80624ddc69affb725db2840bcffce9a1609f59dd883be5e1e42780a1e48169110b8a4ba0152d13fb2cf14536b2cb9d146b6888e4d3ba9cf04dcf78995e687dc151e6487a73fae7045969004beab1655019eca433890f544efecb01c4f2c573f465f69353f1cf1c5cfc858e821ac58eda36652a9306ef06b2cd1165163819edaa2582c7a9296d1fbd0b507d571b2f1a2db8b9a692e8f9acbb42f86e6737dd6a4052a28d1f41f6b542c67dae202cded94a2ee95ea6085973bfd1458150d77ec8efe2a71999965582ac9c5e3cb63ad98f8e518985a0ddd435482af125788c17a74ab776ef024f685c9afd4c34264a462d2eb92106d39ad12013f658119ee6f8856425f0fe1f3e36d83a238376155f8b2dd75437cd9c864b36934c9e134d787aaf38da1de29d3922fead0179bf113285a591991516db80aa1f111bded0a780910736b160beaed78593a7b2a269997fb3ad17bd5ee78dced1ea558844c5e1c278a1cf355f780b368ae698df5b9de54e111804be4a45306127c3a41668756304f972a21c4909ca216e3e9ed2d03c4070ed2f29ab78415dd8ce5ea3083eac2a4b677b957668ed6d06ce2d4e0625e7dfb695079b1d9a0943577b53b3655ccdea881c937412996994759597106def5c20c7fb228ff8873f1461ccc6c252a4b565aede19b77b9f7fe70f18447138f3b32f0e34f454dfa92db076c362538ea4518f51f6cb7b20d316b20368780d4536064c802c17b905799fa14f8838c7778338f0a1f93bf24d85b2bd6b88aea69f783ecbbc6277abbcc5dd693fb350109d585bfa0c9e214130a3f2386d5b64515a25087c1b5b3f5a5a1281cb72968552e4cd5e5ff9d1af2d8a0b3b512dca4448180c4095eebc2a125e8f2cf0372c7cdac06ffd7276a732238ef9fa6a5d8522f0a56b9f282ea21dde0a953ded84be6e8c6e4b698ab8eebe811ff3e2b558bfc2b80c088a86ebb0c785721a9c667c6b0d2c0917fadaa53a896d91a0fe0b0263c85038e3eee8b016f6d9d94d2c70738c585421c305943aa5955812b03058718189d222c00bc084c90bc261222268d0abd38769a76aeafc688557075cc86fa73c0638c13cc48e5e3b30ea648f792f0b77285942c686edbb591bfa502f1325f6d224d525b43963da21879d8bc3369091a0d0c9a7b4f0bae353ad3f22abd81cc19c5e5d6cd17ea63039bcda6247879d098d6f5ab96bb3ef74a0cf654b4821c0024ad0b8d66ad2addb27b8f3654797b19c646d90e62b49c9008df50430411c661335c97e547f7130081c38cb3895d57b047c964ecf76031fc935e8cf3eb93415631856212ec7e4e94e56066bdff771b18743054afcd1fa4d0f9d7ffce4ea25d2f162f3ec77970d38fbbd3f47b7d6d16f32d617eeb8ae56e3e222b91322e3074deea21b3b246e13867169df40c0541e0916d0348200defa5738005e723b5e9f29270df9e9bd5177117ff3f3a2e100901feafaef6b859f175caaf1af5373ce13feb4a2978648aef75ee8ede904718f3374f2cda48779eb19e841f3d9032cfbaa35b8d61209cd5ad3feffd7b87cd8405c4ed033efecf1be60d09cfba4edad88f98af5818ab490cfb8440b8c59c4deeaf971484b12483c0f6b74a71719f68927f5034a4b1afd0914e7062b8839a1ca0daa5c19635656c6b0698dce295d797f2ade32c678ddf063c7f22e7af88042d1c084b6bbf86b4aee8d17eecaed8380670b58af8bdb8b1d574d67d90929afde7c01da5cff6e4dc45c751973e02dd0ce41a2413ee455c6cd4a47d67595fff0c3a850c09bfc4d3e79869df8cc753feaef34a31966b8d998309a8b55e607ff95d09cc7b50b843429f2f1a83c2c4c09618543df0ba283b35b285f6477d76391cb8890903e877b0cf6c9594e3331f47e45fbb4a1e7b5067c9fd75785abaea14dc63a255f648ae18c6d8bb13835d067852ebfd990bff38ae66cb119c63ccf1bdde6096d26a804f21deadd8b27bd73ad1776a9e3e210f0436d1047fc657345a63ea4a5c9bfb886a41b14b2a209cfca59d8b75c5d922a6be867b0b3384556a9b77b03bfb0f6b7e7c035d3875c27a766cf3a5ddb8b038096f18ca131a5c12af30673e0f8c7fecce513e96c6148a1066856fe2de01f9877fd92c8dc9233dda5218028e91964171d55bb8a9486435d679fbb8ebf3f8cec6633a4427e5d317b7737227b9bcae6b66490a9ce24950284d8557387ec7abab2aab67e8810919a0ee127d98b41196c253e3e78ab9203c6a65859fa2cb4ee6ba7de1d3996382b276cd4b49bd3cf065fc2bafe953afea0a641dcd3af0fbff198b4788b88db661aed3849b5d46b281fb069b0aafe7a51f2403122e7b0bb2159d781255ca789a4238c7276a661861bf839276703cde7e49a23165db5397f31c1a163f5616cc624e20d8608bf9212559faca9e10aafd854b2619925f3a55c58b138ba81bd795afa6457147bb2f3190f2cc68474c8d213c4dd410145d20a206a7a10cd0207202ee675762fa721e090aff7fdb9e48160e92fa34", 0x1000) (async) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f0000002200)=ANY=[@ANYRES32=r1], 0x1015, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x2005) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x14}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 544.402690][ C1] sd 0:0:1:0: [sda] tag#383 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 544.412996][ C1] sd 0:0:1:0: [sda] tag#383 CDB: opcode=0xe5 (vendor) [ 544.419789][ C1] sd 0:0:1:0: [sda] tag#383 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 544.429283][ C1] sd 0:0:1:0: [sda] tag#383 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 544.438800][ C1] sd 0:0:1:0: [sda] tag#383 CDB[20]: ba 12:19:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x4, @loopback, 0xd}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f00000001c0)="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", 0x1000) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f0000002200)=ANY=[@ANYRES32=r1], 0x1015, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r5, r4, 0x0, 0x2005) socket$inet6(0xa, 0x400000000001, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) (async) ftruncate(r1, 0x2007fff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) pipe(&(0x7f0000000040)) (async) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x4, @loopback, 0xd}, 0x1c) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f00000001c0)="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", 0x1000) (async) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f0000002200)=ANY=[@ANYRES32=r1], 0x1015, 0x2) (async) pipe(&(0x7f0000000040)) (async) utimensat(r4, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) utimensat(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x2005) (async) 12:19:53 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r0, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0x201012) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x44}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x10001, 0x18}, 0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x3f}, 0x16, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) ioctl$TIOCSBRK(r2, 0x5427) mq_open(&(0x7f0000000100)='[/*)\x00', 0x2, 0x190, &(0x7f0000000140)={0x7, 0x6, 0x80000000, 0x32}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r2, 0x1ab9, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r4 = fsmount(r3, 0x0, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000200)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r1, r2, 0x0, 0x0) 12:19:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000020000060"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:53 executing program 3: umount2(&(0x7f0000000100)='./bus\x00', 0x8) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write(r0, &(0x7f0000000140)="d5", 0x1) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x1e, &(0x7f0000000040)=""/30}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x100000006, 0x40000006) umount2(&(0x7f0000000100)='./bus\x00', 0x8) (async) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x1e, &(0x7f0000000040)=""/30}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) (async) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x48}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x10001, 0x18}, 0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x3f}, 0x16, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) (async) ioctl$TIOCSBRK(r2, 0x5427) (async) mq_open(&(0x7f0000000100)='[/*)\x00', 0x2, 0x190, &(0x7f0000000140)={0x7, 0x6, 0x80000000, 0x32}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r2, 0x1ab9, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r4 = fsmount(r3, 0x0, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000200)=0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) sendfile(r1, r2, 0x0, 0x0) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 544.939944][ C0] sd 0:0:1:0: [sda] tag#334 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 544.950292][ C0] sd 0:0:1:0: [sda] tag#334 CDB: opcode=0xe5 (vendor) [ 544.957085][ C0] sd 0:0:1:0: [sda] tag#334 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 544.966585][ C0] sd 0:0:1:0: [sda] tag#334 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 544.976081][ C0] sd 0:0:1:0: [sda] tag#334 CDB[20]: ba 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x10001, 0x18}, 0xc) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x3f}, 0x16, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r2, 0x2007fff) ioctl$TIOCSBRK(r2, 0x5427) (async) mq_open(&(0x7f0000000100)='[/*)\x00', 0x2, 0x190, &(0x7f0000000140)={0x7, 0x6, 0x80000000, 0x32}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r2, 0x1ab9, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r4 = fsmount(r3, 0x0, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000200)=0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r1) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r6, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) sendfile(r1, r2, 0x0, 0x0) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x88}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="04000000007fffffff"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:53 executing program 3: umount2(&(0x7f0000000100)='./bus\x00', 0x8) (async) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) r1 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x1e, &(0x7f0000000040)=""/30}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r1, 0x0, 0x100000006, 0x40000006) 12:19:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x0, 0x50, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:19:53 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x12}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 545.201126][ C1] sd 0:0:1:0: [sda] tag#341 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 545.211460][ C1] sd 0:0:1:0: [sda] tag#341 CDB: opcode=0xe5 (vendor) [ 545.218258][ C1] sd 0:0:1:0: [sda] tag#341 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 545.227752][ C1] sd 0:0:1:0: [sda] tag#341 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 545.237243][ C1] sd 0:0:1:0: [sda] tag#341 CDB[20]: ba 12:19:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x18}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 545.251246][ T24] audit: type=1400 audit(1642681193.998:501): avc: denied { ioctl } for pid=15907 comm="syz-executor.2" path="socket:[130326]" dev="sockfs" ino=130326 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 12:19:54 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="d5ef80bb1ba6dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000060"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 12:19:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:54 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eae) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x5, 0x4) write(r0, &(0x7f0000000140)="d5", 0x1) r3 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x9) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x100000006, 0x40000006) 12:19:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(0x0, 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) [ 545.393888][ C1] sd 0:0:1:0: [sda] tag#372 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 545.404240][ C1] sd 0:0:1:0: [sda] tag#372 CDB: opcode=0xe5 (vendor) [ 545.411043][ C1] sd 0:0:1:0: [sda] tag#372 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 545.420523][ C1] sd 0:0:1:0: [sda] tag#372 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 545.430015][ C1] sd 0:0:1:0: [sda] tag#372 CDB[20]: ba 12:19:54 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r0, r1, 0x0, 0x201012) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x0, 0x50, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:19:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(0x0, 0x143842, 0x0) ftruncate(r1, 0x2007fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x1, "2156816c73038c"}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r0, r1, 0x0, 0x201012) 12:19:54 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="dc45b3"]}) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x39, 0x0, 0x7f, 0x1f, 0x0, 0x0, 0xfc, 0x14020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x2100, 0x20, 0x3, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x10001, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x0, 0x20, 0x40, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x20000, 0x1}, 0x80, 0x8, 0x3ff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xb, r1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000001a00000420"]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x8a000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket(0x1000000000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f90023", 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="8800b1e8d16fb3f38ad20c76c9fe", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x44}}, {{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x610441, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x6, 0x7fff, 0x5, 0x9, 0x1f, 0x8, 0x0, {r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x7}}, 0x4de52c5a, 0x1, 0x200, 0x80000000, 0x8}}, &(0x7f0000000380)=0xb0) 12:19:54 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eae) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x5, 0x4) write(r0, &(0x7f0000000140)="d5", 0x1) r3 = open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x9) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x100000006, 0x40000006) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x20, 0x0, 0xfffffeff000) (async) pipe(&(0x7f0000000040)) (async) utimensat(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eae) (async) pipe(&(0x7f0000000040)) (async) utimensat(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3fffffff}}, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x5, 0x4) (async) write(r0, &(0x7f0000000140)="d5", 0x1) (async) open(&(0x7f0000000700)='./bus\x00', 0x101042, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) fcntl$setpipe(r4, 0x407, 0x9) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fallocate(r3, 0x0, 0x100000006, 0x40000006) (async) 12:19:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143842, 0x0) ftruncate(r1, 0x2007fff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003880)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x40