Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. 2021/10/05 12:29:20 fuzzer started 2021/10/05 12:29:20 dialing manager at 10.128.0.163:36617 2021/10/05 12:29:20 syscalls: 1977 2021/10/05 12:29:20 code coverage: enabled 2021/10/05 12:29:20 comparison tracing: enabled 2021/10/05 12:29:20 extra coverage: enabled 2021/10/05 12:29:20 setuid sandbox: enabled 2021/10/05 12:29:20 namespace sandbox: enabled 2021/10/05 12:29:20 Android sandbox: enabled 2021/10/05 12:29:20 fault injection: enabled 2021/10/05 12:29:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/05 12:29:20 net packet injection: /dev/net/tun does not exist 2021/10/05 12:29:20 net device setup: enabled 2021/10/05 12:29:20 concurrency sanitizer: enabled 2021/10/05 12:29:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/05 12:29:20 USB emulation: /dev/raw-gadget does not exist 2021/10/05 12:29:20 hci packet injection: /dev/vhci does not exist 2021/10/05 12:29:20 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/10/05 12:29:20 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/10/05 12:29:20 suppressing KCSAN reports in functions: '__xa_clear_mark' 'blk_mq_rq_ctx_init' 'blk_mq_dispatch_rq_list' 'step_into' 2021/10/05 12:29:20 fetching corpus: 0, signal 0/2000 (executing program) 2021/10/05 12:29:21 fetching corpus: 50, signal 13217/15961 (executing program) 2021/10/05 12:29:21 fetching corpus: 100, signal 21078/24170 (executing program) 2021/10/05 12:29:21 fetching corpus: 150, signal 25737/28999 (executing program) 2021/10/05 12:29:21 fetching corpus: 200, signal 30861/33679 (executing program) 2021/10/05 12:29:21 fetching corpus: 247, signal 33856/36448 (executing program) 2021/10/05 12:29:21 fetching corpus: 296, signal 36331/38601 (executing program) 2021/10/05 12:29:21 fetching corpus: 346, signal 38360/40177 (executing program) 2021/10/05 12:29:21 fetching corpus: 396, signal 41039/42024 (executing program) 2021/10/05 12:29:22 fetching corpus: 428, signal 42068/42702 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/42784 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/42850 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/42935 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/42997 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43073 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43148 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43215 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43273 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43332 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43402 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43480 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43546 (executing program) 2021/10/05 12:29:22 fetching corpus: 429, signal 42070/43546 (executing program) 2021/10/05 12:29:23 starting 6 fuzzer processes 12:29:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x12a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit_group(0x0) 12:29:23 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0x2000000000000ff, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') 12:29:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x0, 0x0, 0x0, 0x0, "c727a600a6866ee3d1e4433ac78b57afc46c83290f624401e5a40f9ab394b49fd678b1f3e0e0aab4aac56520ffd1cd8f824f8e7a03e8fd882e2d986cc21956548e5ddcdd748fb77f25a076cb21d6c29e"}, 0xd8) 12:29:23 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) [ 22.994747][ T22] audit: type=1400 audit(1633436963.439:8): avc: denied { execmem } for pid=1106 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 23.118911][ T1112] cgroup: Unknown subsys name 'perf_event' [ 23.121628][ T1113] cgroup: Unknown subsys name 'perf_event' [ 23.138088][ T1112] cgroup: Unknown subsys name 'net_cls' [ 23.148883][ T1113] cgroup: Unknown subsys name 'net_cls' [ 23.155042][ T1114] cgroup: Unknown subsys name 'perf_event' [ 23.161254][ T1115] cgroup: Unknown subsys name 'perf_event' [ 23.167656][ T1114] cgroup: Unknown subsys name 'net_cls' [ 23.180546][ T1115] cgroup: Unknown subsys name 'net_cls' [ 23.188642][ T1118] cgroup: Unknown subsys name 'perf_event' [ 23.195538][ T1120] cgroup: Unknown subsys name 'perf_event' [ 23.197579][ T1118] cgroup: Unknown subsys name 'net_cls' [ 23.208780][ T1120] cgroup: Unknown subsys name 'net_cls' 12:29:27 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0x2000000000000ff, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') 12:29:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x0, 0x0, 0x0, 0x0, "c727a600a6866ee3d1e4433ac78b57afc46c83290f624401e5a40f9ab394b49fd678b1f3e0e0aab4aac56520ffd1cd8f824f8e7a03e8fd882e2d986cc21956548e5ddcdd748fb77f25a076cb21d6c29e"}, 0xd8) 12:29:27 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:27 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0x2000000000000ff, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') 12:29:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) [ 27.516480][ T22] audit: type=1326 audit(1633436967.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3853 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 12:29:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:28 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x0, 0x0, 0x0, 0x0, "c727a600a6866ee3d1e4433ac78b57afc46c83290f624401e5a40f9ab394b49fd678b1f3e0e0aab4aac56520ffd1cd8f824f8e7a03e8fd882e2d986cc21956548e5ddcdd748fb77f25a076cb21d6c29e"}, 0xd8) 12:29:28 executing program 5: set_mempolicy(0x1, &(0x7f00000000c0)=0x2000000000000ff, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') 12:29:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 27.643025][ T22] audit: type=1326 audit(1633436968.091:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 12:29:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x0, 0x0, 0x0, 0x0, "c727a600a6866ee3d1e4433ac78b57afc46c83290f624401e5a40f9ab394b49fd678b1f3e0e0aab4aac56520ffd1cd8f824f8e7a03e8fd882e2d986cc21956548e5ddcdd748fb77f25a076cb21d6c29e"}, 0xd8) 12:29:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 27.728225][ T22] audit: type=1326 audit(1633436968.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3896 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43906a8d9 code=0x0 [ 27.800879][ T22] audit: type=1326 audit(1633436968.211:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 [ 27.825385][ T22] audit: type=1326 audit(1633436968.251:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3910 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 [ 27.862380][ T22] audit: type=1326 audit(1633436968.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3915 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43906a8d9 code=0x0 12:29:31 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 12:29:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) [ 30.661331][ T22] audit: type=1326 audit(1633436971.111:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3933 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43906a8d9 code=0x0 12:29:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x7fffffffffffffff}) [ 30.690255][ T22] audit: type=1326 audit(1633436971.142:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3929 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fc2af8d9 code=0x0 12:29:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20082) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) [ 30.738043][ T22] audit: type=1326 audit(1633436971.192:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3934 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe40edfd8d9 code=0x0 12:29:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x7fffffffffffffff}) [ 30.802071][ T22] audit: type=1326 audit(1633436971.252:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3956 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fc2af8d9 code=0x0 [ 30.851881][ T22] audit: type=1326 audit(1633436971.302:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe40edfd8d9 code=0x0 12:29:34 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x7fffffffffffffff}) 12:29:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:29:34 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 33.704935][ T22] audit: type=1326 audit(1633436974.152:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3982 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe40edfd8d9 code=0x0 12:29:34 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 12:29:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x7fffffffffffffff}) 12:29:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) [ 33.733139][ T22] audit: type=1326 audit(1633436974.182:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=3981 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fc2af8d9 code=0x0 12:29:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 12:29:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:34 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 12:29:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) 12:29:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 12:29:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:37 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 12:29:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:37 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 12:29:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 12:29:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:37 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 12:29:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) [ 36.800411][ T4041] ================================================================== [ 36.808509][ T4041] BUG: KCSAN: data-race in ext4_sync_file / writeback_single_inode [ 36.816409][ T4041] [ 36.818738][ T4041] write to 0xffff888106315270 of 8 bytes by task 4058 on cpu 0: [ 36.826360][ T4041] writeback_single_inode+0x148/0x3e0 [ 36.831738][ T4041] sync_inode_metadata+0x57/0x80 [ 36.836684][ T4041] ext4_sync_file+0x359/0x670 [ 36.841363][ T4041] vfs_fsync_range+0x107/0x120 [ 36.846123][ T4041] ext4_buffered_write_iter+0x3af/0x400 [ 36.851655][ T4041] ext4_file_write_iter+0x2e7/0x11f0 [ 36.856965][ T4041] do_iter_readv_writev+0x2de/0x380 [ 36.862149][ T4041] do_iter_write+0x192/0x5c0 [ 36.866741][ T4041] vfs_iter_write+0x4c/0x70 [ 36.871229][ T4041] iter_file_splice_write+0x43a/0x790 [ 36.876667][ T4041] direct_splice_actor+0x80/0xa0 [ 36.881611][ T4041] splice_direct_to_actor+0x345/0x650 [ 36.886983][ T4041] do_splice_direct+0x106/0x190 [ 36.891826][ T4041] do_sendfile+0x63e/0xbb0 [ 36.896254][ T4041] __x64_sys_sendfile64+0xb9/0x140 [ 36.901364][ T4041] do_syscall_64+0x44/0xa0 [ 36.905786][ T4041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 36.911926][ T4041] [ 36.914234][ T4041] read to 0xffff888106315270 of 8 bytes by task 4041 on cpu 1: [ 36.921860][ T4041] ext4_sync_file+0x294/0x670 [ 36.926577][ T4041] vfs_fsync_range+0x107/0x120 [ 36.931416][ T4041] ext4_buffered_write_iter+0x3af/0x400 [ 36.936946][ T4041] ext4_file_write_iter+0x2e7/0x11f0 [ 36.942222][ T4041] do_iter_readv_writev+0x2de/0x380 [ 36.947415][ T4041] do_iter_write+0x192/0x5c0 [ 36.952090][ T4041] vfs_iter_write+0x4c/0x70 [ 36.956602][ T4041] iter_file_splice_write+0x43a/0x790 [ 36.961962][ T4041] direct_splice_actor+0x80/0xa0 [ 36.966874][ T4041] splice_direct_to_actor+0x345/0x650 [ 36.972232][ T4041] do_splice_direct+0x106/0x190 [ 36.977145][ T4041] do_sendfile+0x63e/0xbb0 [ 36.981571][ T4041] __x64_sys_sendfile64+0xb9/0x140 [ 36.986763][ T4041] do_syscall_64+0x44/0xa0 [ 36.991164][ T4041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 36.997037][ T4041] 12:29:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 36.999346][ T4041] value changed: 0x0000000000000007 -> 0x0000000000000080 [ 37.006425][ T4041] [ 37.008722][ T4041] Reported by Kernel Concurrency Sanitizer on: [ 37.014846][ T4041] CPU: 1 PID: 4041 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0 [ 37.023583][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.033614][ T4041] ================================================================== 12:29:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 12:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 39.992180][ C1] hrtimer: interrupt took 41221 ns 12:29:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e006700141e9b070009040080", 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a", 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 12:29:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 12:29:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:41 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:41 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0xa7b}]}, 0x20}], 0x1}, 0x0) 12:29:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1df5, 0x21f4}, 0x14) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x2000, 0x4) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 12:29:41 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0xa7b}]}, 0x20}], 0x1}, 0x0) 12:29:41 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 2: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0xa7b}]}, 0x20}], 0x1}, 0x0) 12:29:41 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0xa7b}]}, 0x20}], 0x1}, 0x0) 12:29:41 executing program 2: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:41 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:41 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:41 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4b, 0x44}}) 12:29:42 executing program 4: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:42 executing program 2: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') setns(r2, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d6039017088d7810001"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:29:42 executing program 0: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4b, 0x44}}) 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 4: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 0: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 1: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 4: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4b, 0x44}}) 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 1: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 0: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4b, 0x44}}) 12:29:42 executing program 4: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 1: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x20}, {0x6}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 12:29:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) 12:29:42 executing program 4: r0 = fsopen(&(0x7f0000001e00)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='.\x00', &(0x7f0000000640)='<', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[\x00', &(0x7f0000000140)='*\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='none\x00\x8d\xb5[\xe0\xc5\xb9\xe4~\x03\xa1\x96\xfd\x1b\xc6e\xc16\x13\xc6\x95\xf2e\x98\xd1h\x8c\xa3\xe7\'\xdd.#\xc3\x90\x92\v\xaa\xe7!I\xc0\x1e\x9b\x9c4\xb3\x17\x0e\xb3\x94P\x96\x1e*\xc9\xc2\xa2>\xda@\xdb\xfc\xc9\x9bw]\xcb+\x9b\x1a\x86\xa8\xf2\x0f\x1e\\9\ak^', &(0x7f0000000880)='*\')\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A]\xcc`\xdf\fO\xa3\xe9\xde\x19\xfd\xae\xebb\x86\x13\xdf\xa2\x17\n*\xf1[\xa4 \x1c?\xfb\xf5\'\xd1\x88\x9bm5\xc7\xb4\xd5\x06\x9d\x16\xa9\x90\xdb\xf9\x89~\xbe\\/\xa03\xea\xd9\xc3U\xec\x85\xa6\xb1\xb8\xc6J\xb5\x9a', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%%[\x00', &(0x7f0000000400)='\x9c\xf3*&/&{&\xf1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000180)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000840)='\xe1)`((\x7f\xc7\xc2g@\xacH\xd5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='none\x00', &(0x7f0000000500)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000540)="b9", 0x1) [ 41.850017][ T22] audit: type=1326 audit(1633436982.304:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4281 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 12:29:42 executing program 2: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) 12:29:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:42 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) syz_io_uring_setup(0x258, &(0x7f0000003f80), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_setup(0x171, &(0x7f0000004080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004100), &(0x7f0000004140)) r0 = msgget(0x1, 0x402) msgsnd(r0, &(0x7f0000000000)={0x2, "08b252ecb17d75ca7177b7bc"}, 0x14, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/233) r1 = msgget(0x1, 0x190) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)) msgctl$IPC_RMID(r0, 0x0) [ 41.919767][ C1] sd 0:0:1:0: tag#6556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 41.929628][ C1] sd 0:0:1:0: tag#6556 CDB: opcode=0xe5 (vendor) [ 41.935980][ C1] sd 0:0:1:0: tag#6556 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 41.945116][ C1] sd 0:0:1:0: tag#6556 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 41.954155][ C1] sd 0:0:1:0: tag#6556 CDB[20]: ba 12:29:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000001c0)) 12:29:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 42.672748][ T22] audit: type=1326 audit(1633436983.124:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4281 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 12:29:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x20}, {0x6}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 12:29:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:43 executing program 4: r0 = fsopen(&(0x7f0000001e00)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='.\x00', &(0x7f0000000640)='<', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[\x00', &(0x7f0000000140)='*\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='none\x00\x8d\xb5[\xe0\xc5\xb9\xe4~\x03\xa1\x96\xfd\x1b\xc6e\xc16\x13\xc6\x95\xf2e\x98\xd1h\x8c\xa3\xe7\'\xdd.#\xc3\x90\x92\v\xaa\xe7!I\xc0\x1e\x9b\x9c4\xb3\x17\x0e\xb3\x94P\x96\x1e*\xc9\xc2\xa2>\xda@\xdb\xfc\xc9\x9bw]\xcb+\x9b\x1a\x86\xa8\xf2\x0f\x1e\\9\ak^', &(0x7f0000000880)='*\')\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A]\xcc`\xdf\fO\xa3\xe9\xde\x19\xfd\xae\xebb\x86\x13\xdf\xa2\x17\n*\xf1[\xa4 \x1c?\xfb\xf5\'\xd1\x88\x9bm5\xc7\xb4\xd5\x06\x9d\x16\xa9\x90\xdb\xf9\x89~\xbe\\/\xa03\xea\xd9\xc3U\xec\x85\xa6\xb1\xb8\xc6J\xb5\x9a', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%%[\x00', &(0x7f0000000400)='\x9c\xf3*&/&{&\xf1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000180)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000840)='\xe1)`((\x7f\xc7\xc2g@\xacH\xd5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='none\x00', &(0x7f0000000500)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000540)="b9", 0x1) 12:29:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000001c0)) 12:29:43 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) 12:29:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:29:43 executing program 4: r0 = fsopen(&(0x7f0000001e00)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='.\x00', &(0x7f0000000640)='<', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[\x00', &(0x7f0000000140)='*\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='none\x00\x8d\xb5[\xe0\xc5\xb9\xe4~\x03\xa1\x96\xfd\x1b\xc6e\xc16\x13\xc6\x95\xf2e\x98\xd1h\x8c\xa3\xe7\'\xdd.#\xc3\x90\x92\v\xaa\xe7!I\xc0\x1e\x9b\x9c4\xb3\x17\x0e\xb3\x94P\x96\x1e*\xc9\xc2\xa2>\xda@\xdb\xfc\xc9\x9bw]\xcb+\x9b\x1a\x86\xa8\xf2\x0f\x1e\\9\ak^', &(0x7f0000000880)='*\')\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A]\xcc`\xdf\fO\xa3\xe9\xde\x19\xfd\xae\xebb\x86\x13\xdf\xa2\x17\n*\xf1[\xa4 \x1c?\xfb\xf5\'\xd1\x88\x9bm5\xc7\xb4\xd5\x06\x9d\x16\xa9\x90\xdb\xf9\x89~\xbe\\/\xa03\xea\xd9\xc3U\xec\x85\xa6\xb1\xb8\xc6J\xb5\x9a', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%%[\x00', &(0x7f0000000400)='\x9c\xf3*&/&{&\xf1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000180)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000840)='\xe1)`((\x7f\xc7\xc2g@\xacH\xd5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='none\x00', &(0x7f0000000500)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000540)="b9", 0x1) 12:29:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x20}, {0x6}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) [ 42.753259][ T22] audit: type=1326 audit(1633436983.204:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 [ 42.800742][ C0] sd 0:0:1:0: tag#6557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 42.810669][ C0] sd 0:0:1:0: tag#6557 CDB: opcode=0xe5 (vendor) [ 42.817015][ C0] sd 0:0:1:0: tag#6557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 42.826084][ C0] sd 0:0:1:0: tag#6557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 42.835248][ C0] sd 0:0:1:0: tag#6557 CDB[20]: ba 12:29:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000001c0)) 12:29:43 executing program 4: r0 = fsopen(&(0x7f0000001e00)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='.\x00', &(0x7f0000000640)='<', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[\x00', &(0x7f0000000140)='*\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='none\x00\x8d\xb5[\xe0\xc5\xb9\xe4~\x03\xa1\x96\xfd\x1b\xc6e\xc16\x13\xc6\x95\xf2e\x98\xd1h\x8c\xa3\xe7\'\xdd.#\xc3\x90\x92\v\xaa\xe7!I\xc0\x1e\x9b\x9c4\xb3\x17\x0e\xb3\x94P\x96\x1e*\xc9\xc2\xa2>\xda@\xdb\xfc\xc9\x9bw]\xcb+\x9b\x1a\x86\xa8\xf2\x0f\x1e\\9\ak^', &(0x7f0000000880)='*\')\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A]\xcc`\xdf\fO\xa3\xe9\xde\x19\xfd\xae\xebb\x86\x13\xdf\xa2\x17\n*\xf1[\xa4 \x1c?\xfb\xf5\'\xd1\x88\x9bm5\xc7\xb4\xd5\x06\x9d\x16\xa9\x90\xdb\xf9\x89~\xbe\\/\xa03\xea\xd9\xc3U\xec\x85\xa6\xb1\xb8\xc6J\xb5\x9a', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%%[\x00', &(0x7f0000000400)='\x9c\xf3*&/&{&\xf1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000180)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000840)='\xe1)`((\x7f\xc7\xc2g@\xacH\xd5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='none\x00', &(0x7f0000000500)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000540)="b9", 0x1) 12:29:43 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) [ 42.841738][ T22] audit: type=1326 audit(1633436983.294:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4349 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498f40c8d9 code=0x0 [ 42.930202][ C1] sd 0:0:1:0: tag#6558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 42.940050][ C1] sd 0:0:1:0: tag#6558 CDB: opcode=0xe5 (vendor) [ 42.946437][ C1] sd 0:0:1:0: tag#6558 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 42.955470][ C1] sd 0:0:1:0: tag#6558 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 42.964509][ C1] sd 0:0:1:0: tag#6558 CDB[20]: ba 12:29:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x20}, {0x6}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) 12:29:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000001c0)) 12:29:44 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) 12:29:44 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) 12:29:44 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) [ 43.612852][ C1] sd 0:0:1:0: tag#6559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 43.622745][ C1] sd 0:0:1:0: tag#6559 CDB: opcode=0xe5 (vendor) [ 43.629889][ C1] sd 0:0:1:0: tag#6559 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 43.630303][ T22] audit: type=1326 audit(1633436984.084:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4381 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34855998d9 code=0x0 [ 43.638917][ C1] sd 0:0:1:0: tag#6559 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 43.671898][ C1] sd 0:0:1:0: tag#6559 CDB[20]: ba [ 43.683966][ C0] sd 0:0:1:0: tag#6560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 43.693841][ C0] sd 0:0:1:0: tag#6560 CDB: opcode=0xe5 (vendor) [ 43.700170][ C0] sd 0:0:1:0: tag#6560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 12:29:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x20}, {0x6}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) [ 43.709241][ C0] sd 0:0:1:0: tag#6560 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 43.718284][ C0] sd 0:0:1:0: tag#6560 CDB[20]: ba 12:29:44 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) [ 43.765418][ T22] audit: type=1326 audit(1633436984.224:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4390 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498f40c8d9 code=0x0 [ 43.806271][ C0] sd 0:0:1:0: tag#6562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 43.816150][ C0] sd 0:0:1:0: tag#6562 CDB: opcode=0xe5 (vendor) [ 43.817519][ C1] sd 0:0:1:0: tag#6561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 43.822587][ C0] sd 0:0:1:0: tag#6562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 43.832393][ C1] sd 0:0:1:0: tag#6561 CDB: opcode=0xe5 (vendor) [ 43.832417][ C1] sd 0:0:1:0: tag#6561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 12:29:44 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) 12:29:44 executing program 5: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) [ 43.841405][ C0] sd 0:0:1:0: tag#6562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 43.847708][ C1] sd 0:0:1:0: tag#6561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 43.856711][ C0] sd 0:0:1:0: tag#6562 CDB[20]: ba [ 43.865705][ C1] sd 0:0:1:0: tag#6561 CDB[20]: ba [ 43.884923][ C1] sd 0:0:1:0: tag#6563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 43.894852][ C1] sd 0:0:1:0: tag#6563 CDB: opcode=0xe5 (vendor) 12:29:44 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {}, {}, {}, {r9}, {}, {}, {r9}, {0x0, r10}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r8}, {0x0, r10}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r9}, {r8, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r8}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {}, {r8}, {0x0, r10}, {}, {r9}, {r8, r10}, {0x0, r10}, {}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {0x0, r10}, {r8}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {0x0, r3}, {r8}, {r9}, {0x0, r5}, {r8, r10}, {}, {}, {}, {r8}, {r8, r10}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {}, {}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {r8}, {0x0, r10}, {r9, r6}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8}, {}, {r8}, {0x0, r10}, {r9}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r9}, {r8}, {}, {}, {r8}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {}, {r9, r10}, {r8, r10}, {r9}, {r9, r10}, {}, {r11}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {r9}, {0x0, r10}, {}, {r9}, {r9}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {}, {0x0, r10}, {}, {}, {r9}, {r8}, {0x0, r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r9}, {}, {}, {}, {r9}, {r8}, {0x0, r10}, {}, {0x0, r10}, {r9}, {}, {r8}, {0x0, r10}, {r9, r10}, {r9}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b300)={0x0, [], 0x0, "7e6ef4474e165c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa001071c, 0x4ca31, 0xffffffffffffffff, 0x0) [ 43.901210][ C1] sd 0:0:1:0: tag#6563 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 43.910786][ C1] sd 0:0:1:0: tag#6563 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 43.919914][ C1] sd 0:0:1:0: tag#6563 CDB[20]: ba [ 43.993950][ C1] sd 0:0:1:0: tag#6564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 44.003807][ C1] sd 0:0:1:0: tag#6564 CDB: opcode=0xe5 (vendor) [ 44.010153][ C1] sd 0:0:1:0: tag#6564 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 44.019199][ C1] sd 0:0:1:0: tag#6564 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 44.028250][ C1] sd 0:0:1:0: tag#6564 CDB[20]: ba [ 44.033500][ C1] sd 0:0:1:0: tag#6565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 12:29:44 executing program 3: r0 = fsopen(&(0x7f0000001e00)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='.\x00', &(0x7f0000000640)='<', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[\x00', &(0x7f0000000140)='*\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000900)='none\x00\x8d\xb5[\xe0\xc5\xb9\xe4~\x03\xa1\x96\xfd\x1b\xc6e\xc16\x13\xc6\x95\xf2e\x98\xd1h\x8c\xa3\xe7\'\xdd.#\xc3\x90\x92\v\xaa\xe7!I\xc0\x1e\x9b\x9c4\xb3\x17\x0e\xb3\x94P\x96\x1e*\xc9\xc2\xa2>\xda@\xdb\xfc\xc9\x9bw]\xcb+\x9b\x1a\x86\xa8\xf2\x0f\x1e\\9\ak^', &(0x7f0000000880)='*\')\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A]\xcc`\xdf\fO\xa3\xe9\xde\x19\xfd\xae\xebb\x86\x13\xdf\xa2\x17\n*\xf1[\xa4 \x1c?\xfb\xf5\'\xd1\x88\x9bm5\xc7\xb4\xd5\x06\x9d\x16\xa9\x90\xdb\xf9\x89~\xbe\\/\xa03\xea\xd9\xc3U\xec\x85\xa6\xb1\xb8\xc6J\xb5\x9a', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%%[\x00', &(0x7f0000000400)='\x9c\xf3*&/&{&\xf1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000180)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='}}@{%\\F[){/@)*\')\x00', &(0x7f0000000840)='\xe1)`((\x7f\xc7\xc2g@\xacH\xd5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='none\x00', &(0x7f0000000500)='@#$+.:\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000540)="b9", 0x1) 12:29:44 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {}, {}, {}, {}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {}, {r0}, {0x0, r2}, {}, {}, {r0, r2}, {r1}, {}, {0x0, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {0x0, 0x0}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1}, {r0}, {}, {r0}, {}, {}, {0x0, r2}, {}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {r1}, {}, {}, {0x0, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {r0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {r0, r2}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1}, {0x0, r2}, {}, {r1, r2}, {r1}, {}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {}, {}, {}, {}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {r0}, {}, {0x0, r2}, {r0, r2}, {r1}, {0x0, r2}, {r0}, {}, {}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {r1}, {r0}, {}, {}, {}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {}, {}, {r0}, {r1}, {}, {r0}, {}, {}, {0x0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, 0x0}, {r0}, {}, {}, {r1}, {r0}, {}, {0x0, r2}, {}, {r1}, {r1}, {r0}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{r4, 0x8, 0x7, 0x1f, 0x10001, 0x400, 0xfb5, 0x7, 0xf328, 0x2, 0x2, 0x5, 0x0, 0x47a6, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r10}, {0x0, r10}, {r9}, {}, {r9}, {}