[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2021/09/13 02:07:18 fuzzer started 2021/09/13 02:07:18 dialing manager at 10.128.0.163:46435 2021/09/13 02:07:19 syscalls: 1977 2021/09/13 02:07:19 code coverage: enabled 2021/09/13 02:07:19 comparison tracing: enabled 2021/09/13 02:07:19 extra coverage: enabled 2021/09/13 02:07:19 setuid sandbox: enabled 2021/09/13 02:07:19 namespace sandbox: enabled 2021/09/13 02:07:19 Android sandbox: enabled 2021/09/13 02:07:19 fault injection: enabled 2021/09/13 02:07:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/09/13 02:07:19 net packet injection: /dev/net/tun does not exist 2021/09/13 02:07:19 net device setup: enabled 2021/09/13 02:07:19 concurrency sanitizer: enabled 2021/09/13 02:07:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/09/13 02:07:19 USB emulation: /dev/raw-gadget does not exist 2021/09/13 02:07:19 hci packet injection: /dev/vhci does not exist 2021/09/13 02:07:19 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/09/13 02:07:19 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/09/13 02:07:19 suppressing KCSAN reports in functions: 'do_sys_poll' 'step_into' '__xa_clear_mark' 'dd_has_work' 'generic_write_end' 'ext4_free_inodes_count' 2021/09/13 02:07:19 fetching corpus: 0, signal 0/2000 (executing program) 2021/09/13 02:07:19 fetching corpus: 50, signal 10972/14665 (executing program) 2021/09/13 02:07:19 fetching corpus: 100, signal 24498/29418 (executing program) 2021/09/13 02:07:19 fetching corpus: 150, signal 31011/37190 (executing program) 2021/09/13 02:07:19 fetching corpus: 200, signal 35851/43217 (executing program) 2021/09/13 02:07:19 fetching corpus: 250, signal 39264/47827 (executing program) 2021/09/13 02:07:19 fetching corpus: 300, signal 43932/53426 (executing program) 2021/09/13 02:07:19 fetching corpus: 350, signal 48713/58929 (executing program) 2021/09/13 02:07:19 fetching corpus: 399, signal 51827/62909 (executing program) 2021/09/13 02:07:19 fetching corpus: 449, signal 55357/67137 (executing program) 2021/09/13 02:07:19 fetching corpus: 499, signal 57194/69868 (executing program) 2021/09/13 02:07:19 fetching corpus: 549, signal 59555/72969 (executing program) 2021/09/13 02:07:19 fetching corpus: 599, signal 63027/76932 (executing program) 2021/09/13 02:07:19 fetching corpus: 649, signal 65902/80250 (executing program) 2021/09/13 02:07:19 fetching corpus: 698, signal 67317/82398 (executing program) 2021/09/13 02:07:20 fetching corpus: 748, signal 70683/86033 (executing program) 2021/09/13 02:07:20 fetching corpus: 798, signal 72526/88472 (executing program) 2021/09/13 02:07:20 fetching corpus: 847, signal 74768/91103 (executing program) 2021/09/13 02:07:20 fetching corpus: 897, signal 76262/93052 (executing program) 2021/09/13 02:07:20 fetching corpus: 947, signal 77717/94990 (executing program) 2021/09/13 02:07:20 fetching corpus: 997, signal 79085/96796 (executing program) 2021/09/13 02:07:20 fetching corpus: 1047, signal 80400/98567 (executing program) 2021/09/13 02:07:20 fetching corpus: 1097, signal 83195/101261 (executing program) 2021/09/13 02:07:20 fetching corpus: 1147, signal 85594/103598 (executing program) 2021/09/13 02:07:20 fetching corpus: 1197, signal 86949/105184 (executing program) 2021/09/13 02:07:20 fetching corpus: 1247, signal 88057/106585 (executing program) 2021/09/13 02:07:20 fetching corpus: 1297, signal 89300/108021 (executing program) 2021/09/13 02:07:20 fetching corpus: 1347, signal 90669/109517 (executing program) 2021/09/13 02:07:20 fetching corpus: 1397, signal 91585/110689 (executing program) 2021/09/13 02:07:20 fetching corpus: 1447, signal 93432/112412 (executing program) 2021/09/13 02:07:20 fetching corpus: 1497, signal 94335/113558 (executing program) 2021/09/13 02:07:20 fetching corpus: 1547, signal 95876/114949 (executing program) 2021/09/13 02:07:20 fetching corpus: 1597, signal 97303/116275 (executing program) 2021/09/13 02:07:20 fetching corpus: 1647, signal 98200/117320 (executing program) 2021/09/13 02:07:20 fetching corpus: 1697, signal 98986/118286 (executing program) 2021/09/13 02:07:20 fetching corpus: 1747, signal 101051/119823 (executing program) 2021/09/13 02:07:20 fetching corpus: 1797, signal 101972/120751 (executing program) 2021/09/13 02:07:20 fetching corpus: 1847, signal 103123/121768 (executing program) 2021/09/13 02:07:20 fetching corpus: 1897, signal 103852/122558 (executing program) 2021/09/13 02:07:21 fetching corpus: 1947, signal 104723/123412 (executing program) 2021/09/13 02:07:21 fetching corpus: 1997, signal 105606/124207 (executing program) 2021/09/13 02:07:21 fetching corpus: 2047, signal 106666/125090 (executing program) 2021/09/13 02:07:21 fetching corpus: 2097, signal 108477/126241 (executing program) 2021/09/13 02:07:21 fetching corpus: 2147, signal 109106/126864 (executing program) 2021/09/13 02:07:21 fetching corpus: 2197, signal 111080/127889 (executing program) 2021/09/13 02:07:21 fetching corpus: 2247, signal 111757/128428 (executing program) 2021/09/13 02:07:21 fetching corpus: 2297, signal 112715/129094 (executing program) 2021/09/13 02:07:21 fetching corpus: 2347, signal 113949/129800 (executing program) 2021/09/13 02:07:21 fetching corpus: 2397, signal 115007/130436 (executing program) 2021/09/13 02:07:21 fetching corpus: 2447, signal 115878/130963 (executing program) 2021/09/13 02:07:21 fetching corpus: 2497, signal 116714/131466 (executing program) 2021/09/13 02:07:21 fetching corpus: 2547, signal 117487/131958 (executing program) 2021/09/13 02:07:21 fetching corpus: 2597, signal 118248/132420 (executing program) 2021/09/13 02:07:21 fetching corpus: 2647, signal 119268/132911 (executing program) 2021/09/13 02:07:21 fetching corpus: 2697, signal 120239/133333 (executing program) 2021/09/13 02:07:21 fetching corpus: 2747, signal 120701/133682 (executing program) 2021/09/13 02:07:21 fetching corpus: 2797, signal 121340/134002 (executing program) 2021/09/13 02:07:21 fetching corpus: 2847, signal 122244/134383 (executing program) 2021/09/13 02:07:21 fetching corpus: 2897, signal 123427/134795 (executing program) 2021/09/13 02:07:21 fetching corpus: 2947, signal 124264/135108 (executing program) 2021/09/13 02:07:21 fetching corpus: 2997, signal 125148/135405 (executing program) 2021/09/13 02:07:21 fetching corpus: 3047, signal 125733/135615 (executing program) 2021/09/13 02:07:21 fetching corpus: 3097, signal 126526/135830 (executing program) 2021/09/13 02:07:21 fetching corpus: 3147, signal 126957/136004 (executing program) 2021/09/13 02:07:22 fetching corpus: 3197, signal 127800/136204 (executing program) 2021/09/13 02:07:22 fetching corpus: 3247, signal 128615/136374 (executing program) 2021/09/13 02:07:22 fetching corpus: 3297, signal 129258/136486 (executing program) 2021/09/13 02:07:22 fetching corpus: 3347, signal 129766/136595 (executing program) 2021/09/13 02:07:22 fetching corpus: 3395, signal 130231/136621 (executing program) 2021/09/13 02:07:22 fetching corpus: 3445, signal 131280/136621 (executing program) 2021/09/13 02:07:22 fetching corpus: 3495, signal 131970/136621 (executing program) 2021/09/13 02:07:22 fetching corpus: 3545, signal 133412/136621 (executing program) 2021/09/13 02:07:22 fetching corpus: 3595, signal 133971/136681 (executing program) 2021/09/13 02:07:22 fetching corpus: 3645, signal 134517/136681 (executing program) 2021/09/13 02:07:22 fetching corpus: 3687, signal 134995/136709 (executing program) 2021/09/13 02:07:22 fetching corpus: 3687, signal 134995/136709 (executing program) 2021/09/13 02:07:23 starting 6 fuzzer processes 02:07:23 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) 02:07:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 02:07:23 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 02:07:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:23 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e6703004b654b49938ca8db38f8c44f7b7d9c40000000f0fa800000004f87cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05410a9226e97845ce9f8fe1e1a7585b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e787780178155040d10437e2f3940956c5c6aa1cb0cc837ac34a9a4bffbd87bddba2c", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x2b, 0xda1, 0x0) exit_group(0x0) 02:07:23 executing program 4: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syzkaller login: [ 23.592574][ T22] audit: type=1400 audit(1631498843.855:8): avc: denied { execmem } for pid=1119 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 23.684393][ T1125] cgroup: Unknown subsys name 'perf_event' [ 23.704774][ T1125] cgroup: Unknown subsys name 'net_cls' [ 23.718159][ T1126] cgroup: Unknown subsys name 'perf_event' [ 23.727963][ T1126] cgroup: Unknown subsys name 'net_cls' [ 23.735611][ T1127] cgroup: Unknown subsys name 'perf_event' [ 23.746678][ T1129] cgroup: Unknown subsys name 'perf_event' [ 23.748327][ T1127] cgroup: Unknown subsys name 'net_cls' [ 23.759171][ T1130] cgroup: Unknown subsys name 'perf_event' [ 23.764593][ T1129] cgroup: Unknown subsys name 'net_cls' [ 23.765244][ T1130] cgroup: Unknown subsys name 'net_cls' [ 23.774644][ T1133] cgroup: Unknown subsys name 'perf_event' [ 23.793819][ T1133] cgroup: Unknown subsys name 'net_cls' 02:07:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e6703004b654b49938ca8db38f8c44f7b7d9c40000000f0fa800000004f87cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05410a9226e97845ce9f8fe1e1a7585b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e787780178155040d10437e2f3940956c5c6aa1cb0cc837ac34a9a4bffbd87bddba2c", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x2b, 0xda1, 0x0) exit_group(0x0) 02:07:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 02:07:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e6703004b654b49938ca8db38f8c44f7b7d9c40000000f0fa800000004f87cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05410a9226e97845ce9f8fe1e1a7585b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e787780178155040d10437e2f3940956c5c6aa1cb0cc837ac34a9a4bffbd87bddba2c", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x2b, 0xda1, 0x0) exit_group(0x0) 02:07:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 02:07:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 02:07:28 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) 02:07:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="860c3fe93c1242f4e7b126b097eaa769be6d05c41bd34e6703004b654b49938ca8db38f8c44f7b7d9c40000000f0fa800000004f87cfec79b04c2e1fea4b7a3dfc8ea6a7efefe48dd9e05410a9226e97845ce9f8fe1e1a7585b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e787780178155040d10437e2f3940956c5c6aa1cb0cc837ac34a9a4bffbd87bddba2c", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x2b, 0xda1, 0x0) exit_group(0x0) 02:07:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 02:07:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18e, &(0x7f00000003c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 02:07:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 4: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:07:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 02:07:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 02:07:28 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 02:07:28 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) 02:07:28 executing program 4: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:07:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$addseals(r0, 0x409, 0x8) 02:07:28 executing program 4: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:07:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 02:07:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 0: unshare(0xe000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x20) 02:07:28 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 02:07:28 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:28 executing program 4: unshare(0x22060400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084504, &(0x7f0000000600)={0x0, 0x2, 0x0}) 02:07:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() 02:07:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 02:07:28 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 02:07:28 executing program 0: unshare(0xe000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x20) 02:07:28 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:28 executing program 4: unshare(0x22060400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084504, &(0x7f0000000600)={0x0, 0x2, 0x0}) 02:07:28 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 02:07:28 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 02:07:28 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:29 executing program 0: unshare(0xe000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x20) 02:07:29 executing program 4: unshare(0x22060400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084504, &(0x7f0000000600)={0x0, 0x2, 0x0}) 02:07:29 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:29 executing program 5: pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 02:07:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 0: unshare(0xe000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x20) 02:07:29 executing program 4: unshare(0x22060400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80084504, &(0x7f0000000600)={0x0, 0x2, 0x0}) 02:07:29 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:29 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) shutdown(r3, 0x0) 02:07:29 executing program 5: pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 02:07:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 5: pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 02:07:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) 02:07:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 5: pkey_mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 02:07:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) [ 28.932994][ C1] sd 0:0:1:0: tag#1487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 28.942847][ C1] sd 0:0:1:0: tag#1487 CDB: opcode=0xe5 (vendor) [ 28.949202][ C1] sd 0:0:1:0: tag#1487 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 28.958249][ C1] sd 0:0:1:0: tag#1487 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 28.967282][ C1] sd 0:0:1:0: tag#1487 CDB[20]: ba 02:07:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {0x0, 0x8}, {}], 0x3, 0x0) 02:07:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b3d, 0x0) 02:07:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 02:07:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) [ 29.060693][ C1] sd 0:0:1:0: tag#1488 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.070541][ C1] sd 0:0:1:0: tag#1488 CDB: opcode=0xe5 (vendor) [ 29.076903][ C1] sd 0:0:1:0: tag#1488 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.085938][ C1] sd 0:0:1:0: tag#1488 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.095073][ C1] sd 0:0:1:0: tag#1488 CDB[20]: ba 02:07:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b3d, 0x0) 02:07:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) 02:07:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b97000)={0x2, &(0x7f0000000040)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000baf000)=""/1, &(0x7f0000000000)=0x1) 02:07:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) [ 29.123660][ C1] sd 0:0:1:0: tag#1489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.133513][ C1] sd 0:0:1:0: tag#1489 CDB: opcode=0xe5 (vendor) [ 29.139866][ C1] sd 0:0:1:0: tag#1489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.148904][ C1] sd 0:0:1:0: tag#1489 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.157948][ C1] sd 0:0:1:0: tag#1489 CDB[20]: ba 02:07:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) 02:07:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) [ 29.192687][ C0] sd 0:0:1:0: tag#1490 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.202543][ C0] sd 0:0:1:0: tag#1490 CDB: opcode=0xe5 (vendor) [ 29.208888][ C0] sd 0:0:1:0: tag#1490 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.217927][ C0] sd 0:0:1:0: tag#1490 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.226975][ C0] sd 0:0:1:0: tag#1490 CDB[20]: ba 02:07:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b3d, 0x0) 02:07:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) [ 29.237224][ C1] sd 0:0:1:0: tag#1491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.247092][ C1] sd 0:0:1:0: tag#1491 CDB: opcode=0xe5 (vendor) [ 29.253421][ C1] sd 0:0:1:0: tag#1491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 02:07:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x4b3d, 0x0) 02:07:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b97000)={0x2, &(0x7f0000000040)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000baf000)=""/1, &(0x7f0000000000)=0x1) 02:07:29 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 02:07:29 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) [ 29.253440][ C1] sd 0:0:1:0: tag#1491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.253476][ C1] sd 0:0:1:0: tag#1491 CDB[20]: ba 02:07:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) [ 29.359652][ T4153] 9pnet: p9_fd_create_tcp (4153): problem connecting socket to 127.0.0.1 [ 29.390053][ C1] sd 0:0:1:0: tag#1492 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.399908][ C1] sd 0:0:1:0: tag#1492 CDB: opcode=0xe5 (vendor) 02:07:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b97000)={0x2, &(0x7f0000000040)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000baf000)=""/1, &(0x7f0000000000)=0x1) 02:07:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) 02:07:29 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 02:07:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b50081b28559b334a", 0x12e9}], 0x1) [ 29.406254][ C1] sd 0:0:1:0: tag#1492 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.415271][ C1] sd 0:0:1:0: tag#1492 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.424289][ C1] sd 0:0:1:0: tag#1492 CDB[20]: ba [ 29.470099][ C0] sd 0:0:1:0: tag#1493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.470392][ T4175] 9pnet: p9_fd_create_tcp (4175): problem connecting socket to 127.0.0.1 [ 29.482074][ C0] sd 0:0:1:0: tag#1493 CDB: opcode=0xe5 (vendor) [ 29.497181][ C0] sd 0:0:1:0: tag#1493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.506238][ C0] sd 0:0:1:0: tag#1493 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.515264][ C0] sd 0:0:1:0: tag#1493 CDB[20]: ba 02:07:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b97000)={0x2, &(0x7f0000000040)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000baf000)=""/1, &(0x7f0000000000)=0x1) 02:07:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:29 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 02:07:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) [ 29.555347][ C0] sd 0:0:1:0: tag#1494 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 29.565572][ C0] sd 0:0:1:0: tag#1494 CDB: opcode=0xe5 (vendor) [ 29.572003][ C0] sd 0:0:1:0: tag#1494 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 29.581074][ C0] sd 0:0:1:0: tag#1494 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 29.590391][ C0] sd 0:0:1:0: tag#1494 CDB[20]: ba 02:07:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) [ 29.623197][ T4197] 9pnet: p9_fd_create_tcp (4197): problem connecting socket to 127.0.0.1 02:07:30 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 02:07:30 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 02:07:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) 02:07:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) 02:07:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) 02:07:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) [ 30.263091][ T4239] 9pnet: p9_fd_create_tcp (4239): problem connecting socket to 127.0.0.1 02:07:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) 02:07:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fork() capget(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000440)) 02:07:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b41, &(0x7f0000000040)={0x0, 0x0}) 02:07:31 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 02:07:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="645384103cf67ce0", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x4) 02:07:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x2f}], [], 0x4e}) 02:07:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0xfed7, 0x3) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="dd", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 02:07:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x2f}], [], 0x4e}) [ 31.110966][ T4306] tmpfs: Bad value for 'mpol' 02:07:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x2f}], [], 0x4e}) 02:07:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x2f}], [], 0x4e}) 02:07:31 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="645384103cf67ce0", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x4) [ 31.137530][ T4316] tmpfs: Bad value for 'mpol' [ 31.151486][ T4320] tmpfs: Bad value for 'mpol' 02:07:31 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:31 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) [ 31.181554][ T4333] tmpfs: Bad value for 'mpol' 02:07:32 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 02:07:32 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:32 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:32 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 02:07:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:32 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:32 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 02:07:32 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:32 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 02:07:34 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="645384103cf67ce0", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x4) 02:07:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:34 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, 0x0, 0x4) close(r0) 02:07:34 executing program 3: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 02:07:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:34 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) pwrite64(r0, &(0x7f0000000100)="1d", 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 02:07:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="977745c6d9356eab07af421446781fae05f382b5befd2c8816e98980d76416558adf38ab08e3c9af365067a7be3b8bd8b22057bdaddbb221a08ae1a4b406bc42f26e260f7f3d1f0dbcc0ba9ef495807db5809b824ef42a7ad40053bbdd536c2d0d95d293b19c273028483238663f89a04743ea1cd12ae3ef18422b96591e6746b240a824246f22c69cdbdfd20be42b24ad4e8fbc1e0290295a946d2b7343c7117b5561bc097c74855b40fe31100885ad3de754873b6b1ebfbb2c7d9c08c3cfc4aeedfb99cea6c344e4f0d896c9881b6ca9ab5fb9f487a6ae2ebcc2d3f4e28209ebd437b8afdb771b887b24f29f809eb46a2c3f6a82c808a8e2281df2141bd22191a622b8523322635ce7d1b5cbfa3e76377e18220ceed65a533eb018b6a8adc853bd9de422d120e01d5586088d6ac156f00064d496aa4136012028b1901742851ca45ffee9b27ec1a21a5a8e287b38dcb680542f515ac59b7146ac75e9415557ca627ccc6a2b20ce3f0050fff0338dc10e8970e741dbebf37f6bfbe3978b3affb61ad0b9536173ab93ba9637dfbd11ef3a0a431554802fc63d3aeac0dcd835b414f9105005bf6ee198b1bbb9b37cf68751bee4246fc575e70ea0b34647e9843fd4afe41a4719373b952a7a2b4f26685cea7bde1ff681cc90c28d610fe3e0311de017157064147cbd14d10c5364a026d04092dbb83b447f347ae773d05410500dc09c045f4579ff095a46936297fd84256752bdbea3da98a3a550b9dc2030e9baa18cdf37e60bd9317ce36171f57ebcc1e7048a64cf96bda83bed010e9265d936b53ab657eaafc7b1eeadf1d6a031f81ad4ec29bdd7cb2be63974cccb8c1aadcf53fc472e65c006cd4bb45bf3ee08f05a4a4c183ac997b437b8c9812864068818a1463479ca0a8b2244e613b91f2263ed200ed77d9506821335745f4b3e9b00035d6119c352748deb86f8d9df555c56ea35af7c5e44303943e2ec6c980d20a9041c245295c097f69e2f40d81985d08acc82beccb5452b084f7ec1c1d349b66c1b9c929f038e1948686ca1606cf40e05de6c6fd43373f43ed65182fc80972cb1a226a14fe534b0c9da75781983d8d9be8ef4152340cb6438bb36d7e39b2667c2331263ec8c65671e7c937de683653c9c93650046d4be8cba08ee3fb656537888a7951fbd3a3f46b1452460dfa08e311a4463f5a43920f358a9d90ca005f172528ac1f7a57bf1fa2e88cd0a2a98c6cb90e54e6c1e531d3b1a5a0bfccc119c9cd14318e7313a0be977d28d3fd20e93255c7819051bcb230c408c426c98a3d162a87f92800cc13013c8242e8f0387c77678b783b2916b1d170ffe32336ec320abb3204db17be68a65fe794333eb5dcb9be2b88d8d0b9371ab8b750a2a2470a4c0d040e653782017b8d69b0915f9a1915aa6a725dfa8f483bedf86a356613c4529c31a"}) 02:07:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)='\v ') 02:07:34 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) pwrite64(r0, &(0x7f0000000100)="1d", 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 02:07:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)='\v ') 02:07:37 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="645384103cf67ce0", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x4) 02:07:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="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"}) 02:07:37 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) pwrite64(r0, &(0x7f0000000100)="1d", 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 02:07:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000007c0)) 02:07:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)='\v ') 02:07:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)='\v ') 02:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="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"}) 02:07:37 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) pwrite64(r0, &(0x7f0000000100)="1d", 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 02:07:37 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x5450, 0x0) 02:07:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x209, 0x0, "b0473019f75f3399ba0851907cc76ed6ce1bce"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x47) 02:07:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="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"}) 02:07:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x5450, 0x0) 02:07:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x209, 0x0, "b0473019f75f3399ba0851907cc76ed6ce1bce"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x47) 02:07:40 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="80d9e9652ce580edd21788"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 02:07:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x5450, 0x0) 02:07:40 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="80d9e9652ce580edd21788"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 02:07:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11b, &(0x7f0000000340)="8d31e1d55b6939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24a1d9273bc98f78631776333afd16d66c13830c1beaa1b950e000000000000ab69347b9a915308c482353c485f8bb2965cd7e1292aaa6375f12e59f92cba4a37c9686d403d3a82d09ecbe57d3c3ec2117496b2dd4837334f2de9a39640516defd1e86cdf7a3585dea46ced4a31aaeddba0fa19737336aa9a0edba44df0b8138ed7f91262b41da05a13cd0bdb0d9ababc3074e95d7298a63d1be626073cb28d1eafc9615c7a9fb113bd94e0825e7850f5d86a23757ac244d58d632599ea5929fe74774d989ea9d90e9ee65d489860e678532bfa9deb3078094f165f2800b2e237639a4c2ef5fb36f7763e95066727bc"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 02:07:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x209, 0x0, "b0473019f75f3399ba0851907cc76ed6ce1bce"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x47) 02:07:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x5450, 0x0) 02:07:40 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="80d9e9652ce580edd21788"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 02:07:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x209, 0x0, "b0473019f75f3399ba0851907cc76ed6ce1bce"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x47) 02:07:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x5}}) 02:07:40 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = io_uring_setup(0x45db, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') creat(&(0x7f00000006c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 02:07:40 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="80d9e9652ce580edd21788"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xd2}], 0x38b, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 02:07:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11b, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 02:07:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x5}}) 02:07:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x5}}) 02:07:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x5}}) 02:07:40 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = io_uring_setup(0x45db, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') creat(&(0x7f00000006c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 02:07:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11b, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 02:07:40 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:40 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000d0, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 02:07:41 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:41 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11b, &(0x7f0000000340)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x34) 02:07:41 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = io_uring_setup(0x45db, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') creat(&(0x7f00000006c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 02:07:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1b6, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x22) 02:07:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1b6, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x22) 02:07:41 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, r2+10000000}}, &(0x7f0000000280)) 02:07:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1b6, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x22) 02:07:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@fuse_with_parent={0x1}, 0x0) 02:07:41 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) 02:07:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@fuse_with_parent={0x1}, 0x0) 02:07:41 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = io_uring_setup(0x45db, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') creat(&(0x7f00000006c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 02:07:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1b6, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x22) 02:07:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) 02:07:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) 02:07:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@fuse_with_parent={0x1}, 0x0) 02:07:41 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) 02:07:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc113, 0x0, "33ab131306e4fae28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x22) 02:07:41 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@fuse_with_parent={0x1}, 0x0) 02:07:41 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 1: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, 0x0}, {}, {}, {0x0, r4}, {0x0}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, 0x0}, {r2}, {0x0, r4}, {}, {0x0, 0x0}, {r2, r4}, {r3, 0x0}, {}, {0x0, r4}, {}, {0x0, 0x0}, {}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {0x0}, {r3}, {r2}, {0x0, 0x0}, {0x0, r4}, {0x0}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0}, {}, {}, {}, {r2, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {0x0, 0x0}, {0x0}, {}, {0x0, r4}, {r2}, {0x0, 0x0}, {}, {}, {r2}, {}, {0x0, 0x0}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0}, {r2, r4}, {}, {0x0, r4}, {}, {0x0}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2, 0x0}, {r3}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r2, r4}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {r2, 0x0}, {0x0, r4}, {0x0, r4}, {0x0, 0x0}, {0x0}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, 0x0}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, 0x0}, {0x0, 0x0}, {r2}, {r2}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {}, {0x0, 0x0}, {r3}, {r2, 0x0}, {0x0}, {r2, 0x0}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {r3, r4}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0}, {}, {r3}, {0x0, 0x0}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {r2, r4}, {0x0, r4}, {r3, 0x0}, {r3, 0x0}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r2}], 0x1, "2156816c73038c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r105 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r105, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x8, [{}, {}, {}, {}, {}, {}, {r84, r104}, {0x0, r92}, {0x0, r13}, {}, {r34, r98}, {r27}, {}, {}, {}, {0x0, r39}, {}, {r95}, {}, {r86}, {0x0, r89}, {}, {r61}, {}, {r97}, {0x0, r28}, {}, {0x0, r5}, {}, {0x0, r26}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {r19}, {}, {}, {r88}, {}, {}, {}, {}, {}, {}, {}, {0x0, r66}, {}, {}, {}, {0x0, r76}, {0x0, r44}, {}, {}, {}, {0x0, r71}, {r78}, {}, {}, {}, {}, {}, {}, {r37}, {0x0, r36}, {}, {}, {}, {}, {0x0, r9}, {r100}, {0x0, r23}, {}, {0x0, r77}, {}, {r53}, {r72}, {}, {}, {}, {r51, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r58}, {}, {0x0, r45}, {}, {}, {r40, r74}, {}, {}, {}, {r99, r32}, {r24}, {}, {r42}, {r93}, {r8}, {}, {0x0, r17}, {r12}, {0x0, r73}, {}, {}, {}, {r64}, {}, {0x0, r33}, {r58, r16}, {}, {r87, r55}, {r91}, {}, {}, {}, {r37}, {}, {0x0, r69}, {r70}, {r60}, {}, {r59}, {}, {0x0, r33}, {}, {}, {}, {}, {}, {}, {r54, r15}, {r10, r65}, {r48}, {r46}, {r11}, {}, {}, {}, {r47}, {}, {0x0, r80}, {}, {}, {r81}, {r62, r102}, {}, {}, {r87}, {}, {}, {r34, r35}, {}, {}, {}, {}, {r25}, {}, {}, {r78, r52}, {}, {0x0, r94}, {}, {0x0, r30}, {}, {}, {}, {}, {r50}, {r90}, {r68}, {}, {r21}, {}, {0x0, r4}, {0x0, r63}, {r29}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {r41}, {}, {}, {}, {}, {r99}, {r6}, {}, {0x0, r103}, {}, {0x0, r101}, {}, {r83}, {r18}, {0x0, r96}, {r43}, {}, {}, {0x0, r38}, {}, {}, {}, {}, {r93, r67}, {0x0, r82}, {}, {r56}, {r31}, {r7}, {r75}, {0x0, r20}, {}, {0x0, r79}, {}, {}, {0x0, r89}, {}, {}, {0x0, r57}, {}, {}, {0x0, r85}, {}, {0x0, r49}, {}, {r59}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r8}], 0x0, "05b9945130b038"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r106 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r107 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r106, r107, 0x0) 02:07:41 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 1: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, 0x0}, {}, {}, {0x0, r4}, {0x0}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, 0x0}, {r2}, {0x0, r4}, {}, {0x0, 0x0}, {r2, r4}, {r3, 0x0}, {}, {0x0, r4}, {}, {0x0, 0x0}, {}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {0x0}, {r3}, {r2}, {0x0, 0x0}, {0x0, r4}, {0x0}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0}, {}, {}, {}, {r2, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {0x0, 0x0}, {0x0}, {}, {0x0, r4}, {r2}, {0x0, 0x0}, {}, {}, {r2}, {}, {0x0, 0x0}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0}, {r2, r4}, {}, {0x0, r4}, {}, {0x0}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2, 0x0}, {r3}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r2, r4}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {r2, 0x0}, {0x0, r4}, {0x0, r4}, {0x0, 0x0}, {0x0}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, 0x0}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, 0x0}, {0x0, 0x0}, {r2}, {r2}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {}, {0x0, 0x0}, {r3}, {r2, 0x0}, {0x0}, {r2, 0x0}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {r3, r4}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0}, {}, {r3}, {0x0, 0x0}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {r2, r4}, {0x0, r4}, {r3, 0x0}, {r3, 0x0}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r2}], 0x1, "2156816c73038c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r105 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r105, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x8, [{}, {}, {}, {}, {}, {}, {r84, r104}, {0x0, r92}, {0x0, r13}, {}, {r34, r98}, {r27}, {}, {}, {}, {0x0, r39}, {}, {r95}, {}, {r86}, {0x0, r89}, {}, {r61}, {}, {r97}, {0x0, r28}, {}, {0x0, r5}, {}, {0x0, r26}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {r19}, {}, {}, {r88}, {}, {}, {}, {}, {}, {}, {}, {0x0, r66}, {}, {}, {}, {0x0, r76}, {0x0, r44}, {}, {}, {}, {0x0, r71}, {r78}, {}, {}, {}, {}, {}, {}, {r37}, {0x0, r36}, {}, {}, {}, {}, {0x0, r9}, {r100}, {0x0, r23}, {}, {0x0, r77}, {}, {r53}, {r72}, {}, {}, {}, {r51, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r58}, {}, {0x0, r45}, {}, {}, {r40, r74}, {}, {}, {}, {r99, r32}, {r24}, {}, {r42}, {r93}, {r8}, {}, {0x0, r17}, {r12}, {0x0, r73}, {}, {}, {}, {r64}, {}, {0x0, r33}, {r58, r16}, {}, {r87, r55}, {r91}, {}, {}, {}, {r37}, {}, {0x0, r69}, {r70}, {r60}, {}, {r59}, {}, {0x0, r33}, {}, {}, {}, {}, {}, {}, {r54, r15}, {r10, r65}, {r48}, {r46}, {r11}, {}, {}, {}, {r47}, {}, {0x0, r80}, {}, {}, {r81}, {r62, r102}, {}, {}, {r87}, {}, {}, {r34, r35}, {}, {}, {}, {}, {r25}, {}, {}, {r78, r52}, {}, {0x0, r94}, {}, {0x0, r30}, {}, {}, {}, {}, {r50}, {r90}, {r68}, {}, {r21}, {}, {0x0, r4}, {0x0, r63}, {r29}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {r41}, {}, {}, {}, {}, {r99}, {r6}, {}, {0x0, r103}, {}, {0x0, r101}, {}, {r83}, {r18}, {0x0, r96}, {r43}, {}, {}, {0x0, r38}, {}, {}, {}, {}, {r93, r67}, {0x0, r82}, {}, {r56}, {r31}, {r7}, {r75}, {0x0, r20}, {}, {0x0, r79}, {}, {}, {0x0, r89}, {}, {}, {0x0, r57}, {}, {}, {0x0, r85}, {}, {0x0, r49}, {}, {r59}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r8}], 0x0, "05b9945130b038"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r106 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r107 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r106, r107, 0x0) 02:07:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7970, 0x4) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4, 0x4}}], 0x1, 0x12062, 0x0) 02:07:41 executing program 1: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, 0x0}, {}, {}, {0x0, r4}, {0x0}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, 0x0}, {r2}, {0x0, r4}, {}, {0x0, 0x0}, {r2, r4}, {r3, 0x0}, {}, {0x0, r4}, {}, {0x0, 0x0}, {}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {0x0}, {r3}, {r2}, {0x0, 0x0}, {0x0, r4}, {0x0}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0}, {}, {}, {}, {r2, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {0x0, 0x0}, {0x0}, {}, {0x0, r4}, {r2}, {0x0, 0x0}, {}, {}, {r2}, {}, {0x0, 0x0}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0}, {r2, r4}, {}, {0x0, r4}, {}, {0x0}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2, 0x0}, {r3}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r2, r4}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {r2, 0x0}, {0x0, r4}, {0x0, r4}, {0x0, 0x0}, {0x0}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, 0x0}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, 0x0}, {0x0, 0x0}, {r2}, {r2}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {}, {0x0, 0x0}, {r3}, {r2, 0x0}, {0x0}, {r2, 0x0}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {r3, r4}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0}, {}, {r3}, {0x0, 0x0}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {r2, r4}, {0x0, r4}, {r3, 0x0}, {r3, 0x0}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r2}], 0x1, "2156816c73038c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r105 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r105, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x8, [{}, {}, {}, {}, {}, {}, {r84, r104}, {0x0, r92}, {0x0, r13}, {}, {r34, r98}, {r27}, {}, {}, {}, {0x0, r39}, {}, {r95}, {}, {r86}, {0x0, r89}, {}, {r61}, {}, {r97}, {0x0, r28}, {}, {0x0, r5}, {}, {0x0, r26}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {r19}, {}, {}, {r88}, {}, {}, {}, {}, {}, {}, {}, {0x0, r66}, {}, {}, {}, {0x0, r76}, {0x0, r44}, {}, {}, {}, {0x0, r71}, {r78}, {}, {}, {}, {}, {}, {}, {r37}, {0x0, r36}, {}, {}, {}, {}, {0x0, r9}, {r100}, {0x0, r23}, {}, {0x0, r77}, {}, {r53}, {r72}, {}, {}, {}, {r51, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r58}, {}, {0x0, r45}, {}, {}, {r40, r74}, {}, {}, {}, {r99, r32}, {r24}, {}, {r42}, {r93}, {r8}, {}, {0x0, r17}, {r12}, {0x0, r73}, {}, {}, {}, {r64}, {}, {0x0, r33}, {r58, r16}, {}, {r87, r55}, {r91}, {}, {}, {}, {r37}, {}, {0x0, r69}, {r70}, {r60}, {}, {r59}, {}, {0x0, r33}, {}, {}, {}, {}, {}, {}, {r54, r15}, {r10, r65}, {r48}, {r46}, {r11}, {}, {}, {}, {r47}, {}, {0x0, r80}, {}, {}, {r81}, {r62, r102}, {}, {}, {r87}, {}, {}, {r34, r35}, {}, {}, {}, {}, {r25}, {}, {}, {r78, r52}, {}, {0x0, r94}, {}, {0x0, r30}, {}, {}, {}, {}, {r50}, {r90}, {r68}, {}, {r21}, {}, {0x0, r4}, {0x0, r63}, {r29}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {r41}, {}, {}, {}, {}, {r99}, {r6}, {}, {0x0, r103}, {}, {0x0, r101}, {}, {r83}, {r18}, {0x0, r96}, {r43}, {}, {}, {0x0, r38}, {}, {}, {}, {}, {r93, r67}, {0x0, r82}, {}, {r56}, {r31}, {r7}, {r75}, {0x0, r20}, {}, {0x0, r79}, {}, {}, {0x0, r89}, {}, {}, {0x0, r57}, {}, {}, {0x0, r85}, {}, {0x0, r49}, {}, {r59}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r8}], 0x0, "05b9945130b038"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r106 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r107 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r106, r107, 0x0) 02:07:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 0: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 1: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 3: r0 = syz_open_procfs(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, 0x0}, {}, {}, {0x0, r4}, {0x0}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, 0x0}, {r2}, {0x0, r4}, {}, {0x0, 0x0}, {r2, r4}, {r3, 0x0}, {}, {0x0, r4}, {}, {0x0, 0x0}, {}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {0x0}, {r3}, {r2}, {0x0, 0x0}, {0x0, r4}, {0x0}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0}, {}, {}, {}, {r2, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {0x0, 0x0}, {0x0}, {}, {0x0, r4}, {r2}, {0x0, 0x0}, {}, {}, {r2}, {}, {0x0, 0x0}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0, 0x0}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0}, {r2, r4}, {}, {0x0, r4}, {}, {0x0}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2, 0x0}, {r3}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r2, r4}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, r4}, {r2, 0x0}, {0x0, r4}, {0x0, r4}, {0x0, 0x0}, {0x0}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, 0x0}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, 0x0}, {0x0, 0x0}, {r2}, {r2}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {}, {0x0, 0x0}, {r3}, {r2, 0x0}, {0x0}, {r2, 0x0}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {r3, r4}, {0x0, 0x0}, {}, {0x0}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0}, {}, {r3}, {0x0, 0x0}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, 0x0}, {0x0, r4}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {r2, r4}, {0x0, r4}, {r3, 0x0}, {r3, 0x0}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r2}], 0x1, "2156816c73038c"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r105 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r105, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a40)={0x8, [{}, {}, {}, {}, {}, {}, {r84, r104}, {0x0, r92}, {0x0, r13}, {}, {r34, r98}, {r27}, {}, {}, {}, {0x0, r39}, {}, {r95}, {}, {r86}, {0x0, r89}, {}, {r61}, {}, {r97}, {0x0, r28}, {}, {0x0, r5}, {}, {0x0, r26}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {r19}, {}, {}, {r88}, {}, {}, {}, {}, {}, {}, {}, {0x0, r66}, {}, {}, {}, {0x0, r76}, {0x0, r44}, {}, {}, {}, {0x0, r71}, {r78}, {}, {}, {}, {}, {}, {}, {r37}, {0x0, r36}, {}, {}, {}, {}, {0x0, r9}, {r100}, {0x0, r23}, {}, {0x0, r77}, {}, {r53}, {r72}, {}, {}, {}, {r51, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r58}, {}, {0x0, r45}, {}, {}, {r40, r74}, {}, {}, {}, {r99, r32}, {r24}, {}, {r42}, {r93}, {r8}, {}, {0x0, r17}, {r12}, {0x0, r73}, {}, {}, {}, {r64}, {}, {0x0, r33}, {r58, r16}, {}, {r87, r55}, {r91}, {}, {}, {}, {r37}, {}, {0x0, r69}, {r70}, {r60}, {}, {r59}, {}, {0x0, r33}, {}, {}, {}, {}, {}, {}, {r54, r15}, {r10, r65}, {r48}, {r46}, {r11}, {}, {}, {}, {r47}, {}, {0x0, r80}, {}, {}, {r81}, {r62, r102}, {}, {}, {r87}, {}, {}, {r34, r35}, {}, {}, {}, {}, {r25}, {}, {}, {r78, r52}, {}, {0x0, r94}, {}, {0x0, r30}, {}, {}, {}, {}, {r50}, {r90}, {r68}, {}, {r21}, {}, {0x0, r4}, {0x0, r63}, {r29}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {r41}, {}, {}, {}, {}, {r99}, {r6}, {}, {0x0, r103}, {}, {0x0, r101}, {}, {r83}, {r18}, {0x0, r96}, {r43}, {}, {}, {0x0, r38}, {}, {}, {}, {}, {r93, r67}, {0x0, r82}, {}, {r56}, {r31}, {r7}, {r75}, {0x0, r20}, {}, {0x0, r79}, {}, {}, {0x0, r89}, {}, {}, {0x0, r57}, {}, {}, {0x0, r85}, {}, {0x0, r49}, {}, {r59}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r8}], 0x0, "05b9945130b038"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r106 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r107 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r106, r107, 0x0) 02:07:41 executing program 0: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 1: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 02:07:41 executing program 0: setreuid(0x0, 0xee00) r0 = semget$private(0x0, 0x2, 0x0) setreuid(0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xee00}}) semctl$IPC_RMID(r0, 0x0, 0x0) 02:07:41 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000002a0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:07:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040102000000e6ffffffffffffff00050001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 02:07:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 02:07:41 executing program 1: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:41 executing program 4: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:41 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 02:07:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 02:07:41 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000002a0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:07:41 executing program 4: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:41 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 02:07:41 executing program 1: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 02:07:41 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000002a0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:07:42 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040102000000e6ffffffffffffff00050001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 02:07:42 executing program 1: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:42 executing program 4: r0 = memfd_create(&(0x7f0000001380)='#\x04\x00\x00\x00d%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 02:07:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 02:07:42 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 02:07:42 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000002a0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 02:07:42 executing program 3: keyctl$update(0x2, 0x0, 0x0, 0x0) 02:07:42 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:42 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 02:07:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x1b, 0x5b, 0x3c, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa63, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:07:42 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:42 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040102000000e6ffffffffffffff00050001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 02:07:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x1b, 0x5b, 0x3c, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa63, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:07:43 executing program 3: keyctl$update(0x2, 0x0, 0x0, 0x0) 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 02:07:43 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:43 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:43 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 02:07:43 executing program 3: keyctl$update(0x2, 0x0, 0x0, 0x0) 02:07:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x1b, 0x5b, 0x3c, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa63, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 02:07:43 executing program 3: keyctl$update(0x2, 0x0, 0x0, 0x0) 02:07:44 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040102000000e6ffffffffffffff00050001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe5, 0x0) 02:07:44 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x1b, 0x5b, 0x3c, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa63, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:07:44 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 02:07:44 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:44 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b47", 0x4}], 0x1) 02:07:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b47", 0x4}], 0x1) 02:07:44 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b47", 0x4}], 0x1) 02:07:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b47", 0x4}], 0x1) 02:07:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:45 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:45 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:45 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:45 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'system_u:object_r:shadow_t:s0\x00'}]}, 0x60}}, 0x0) 02:07:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'system_u:object_r:shadow_t:s0\x00'}]}, 0x60}}, 0x0) [ 45.014390][ T4980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 45.024273][ T4985] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 02:07:45 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 02:07:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'system_u:object_r:shadow_t:s0\x00'}]}, 0x60}}, 0x0) 02:07:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() setrlimit(0xf, 0x0) sched_setattr(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@isdn={0x22, 0x6, 0x2, 0x20, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="39936b1aec69f6db30fe60e42132154cc9cb16ea49c90ffb82d7aaf1a2da183e98bd62d8d164", 0x26}, {&(0x7f00000002c0)="f9a73a36eddc656b530857f20c061ea87a0a42ae6126e8e57361de207dca47579dce4d3d938ff69873463c1d42f1c0f5749f9695ccdaa166c731eee908921ccf4db74d972cc8acf913a4d582f4b64f02a3302f3365a94e2904919a6265831e303c7d04e43b371e224e45cc6bfbcf", 0x6e}], 0x2}, 0x480c0) r2 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 45.070633][ T4995] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 02:07:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000000)={0xffffffff, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) 02:07:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x60, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'system_u:object_r:shadow_t:s0\x00'}]}, 0x60}}, 0x0) 02:07:45 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, r0+60000000}}, 0x0) timer_delete(0x0) [ 45.115078][ T5002] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 45.179536][ T5016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 02:07:45 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000000)={0xffffffff, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) 02:07:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/182, 0xa8}], 0x1, 0x0, 0x0) 02:07:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 02:07:45 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, r0+60000000}}, 0x0) timer_delete(0x0) 02:07:45 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000032a000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, r4+60000000}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 02:07:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000000)={0xffffffff, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) 02:07:45 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, r0+60000000}}, 0x0) timer_delete(0x0) 02:07:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/182, 0xa8}], 0x1, 0x0, 0x0) 02:07:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, &(0x7f0000000000)={0xffffffff, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) 02:07:45 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, r0+60000000}}, 0x0) timer_delete(0x0) 02:07:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/182, 0xa8}], 0x1, 0x0, 0x0) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$IPC_SET(0x0, 0xf, 0x0) 02:07:46 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/182, 0xa8}], 0x1, 0x0, 0x0) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x80400001, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000019100)=""/102400, &(0x7f0000000040)=0x19000) 02:07:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x5, 0x0) 02:07:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@nojoliet}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x1440000000000}}]}) 02:07:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cb0000000104000400006b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x80400001, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000019100)=""/102400, &(0x7f0000000040)=0x19000) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$IPC_SET(0x0, 0xf, 0x0) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$IPC_SET(0x0, 0xf, 0x0) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x80400001, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000019100)=""/102400, &(0x7f0000000040)=0x19000) 02:07:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cb0000000104000400006b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$IPC_SET(0x0, 0xf, 0x0) 02:07:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@nojoliet}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x1440000000000}}]}) 02:07:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x5, 0x0) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x80400001, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000019100)=""/102400, &(0x7f0000000040)=0x19000) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cb0000000104000400006b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@nojoliet}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x1440000000000}}]}) 02:07:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cb0000000104000400006b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 02:07:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@nojoliet}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x1440000000000}}]}) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x5, 0x0) 02:07:46 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) quotactl(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 02:07:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xffffffa1}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 02:07:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}]}]}, 0x1c}], 0x1}, 0x0) 02:07:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:46 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) quotactl(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x62000200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\x00\x7f\x00\x00\x00\x00\xa7\xfb\x81dD7f\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00C\xeb\xce\x00\x01\x8f9\x00\x00\x00\x00\x00\x00\x00\x80\x00'/72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8918, &(0x7f0000000280)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d\xba\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/79) 02:07:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xffffffa1}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 02:07:47 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) quotactl(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 02:07:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}]}]}, 0x1c}], 0x1}, 0x0) 02:07:47 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xfffffffffffffc70) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) recvmsg$unix(r2, &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) 02:07:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x5, 0x0) 02:07:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xffffffa1}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 02:07:47 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) quotactl(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 02:07:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}]}]}, 0x1c}], 0x1}, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x88, 0x66, &(0x7f0000002fc0), &(0x7f00000000c0)=0x4) 02:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @empty=0x4000500}]}, 0x24}}, 0x0) 02:07:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xffffffa1}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 02:07:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}]}]}, 0x1c}], 0x1}, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x88, 0x66, &(0x7f0000002fc0), &(0x7f00000000c0)=0x4) 02:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @empty=0x4000500}]}, 0x24}}, 0x0) [ 46.991411][ C0] sd 0:0:1:0: tag#1523 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.001296][ C0] sd 0:0:1:0: tag#1523 CDB: opcode=0xe5 (vendor) [ 47.007652][ C0] sd 0:0:1:0: tag#1523 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.016685][ C0] sd 0:0:1:0: tag#1523 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.025717][ C0] sd 0:0:1:0: tag#1523 CDB[20]: ba 02:07:47 executing program 1: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) [ 47.037404][ C0] hrtimer: interrupt took 19569 ns [ 47.089813][ T22] audit: type=1326 audit(1631498867.358:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 02:07:47 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x88, 0x66, &(0x7f0000002fc0), &(0x7f00000000c0)=0x4) 02:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @empty=0x4000500}]}, 0x24}}, 0x0) 02:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001500)="2230887a0cba0d2333bfbadfd1be68aa72406e0a0d20") 02:07:47 executing program 1: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) 02:07:47 executing program 0: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) [ 47.177881][ T22] audit: type=1326 audit(1631498867.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=436 compat=0 ip=0x4665f9 code=0x7ffc0000 02:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @empty=0x4000500}]}, 0x24}}, 0x0) 02:07:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:47 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x88, 0x66, &(0x7f0000002fc0), &(0x7f00000000c0)=0x4) 02:07:47 executing program 1: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) [ 47.234025][ C0] sd 0:0:1:0: tag#1479 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.244314][ C0] sd 0:0:1:0: tag#1479 CDB: opcode=0xe5 (vendor) [ 47.250672][ C0] sd 0:0:1:0: tag#1479 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.259713][ C0] sd 0:0:1:0: tag#1479 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.268762][ C0] sd 0:0:1:0: tag#1479 CDB[20]: ba 02:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001500)="2230887a0cba0d2333bfbadfd1be68aa72406e0a0d20") 02:07:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) [ 47.366858][ C0] sd 0:0:1:0: tag#1480 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.373965][ T22] audit: type=1326 audit(1631498867.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.376782][ C0] sd 0:0:1:0: tag#1480 CDB: opcode=0xe5 (vendor) [ 47.376809][ C0] sd 0:0:1:0: tag#1480 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 02:07:47 executing program 1: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) 02:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001500)="2230887a0cba0d2333bfbadfd1be68aa72406e0a0d20") 02:07:47 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) [ 47.376825][ C0] sd 0:0:1:0: tag#1480 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.376844][ C0] sd 0:0:1:0: tag#1480 CDB[20]: ba [ 47.402628][ C0] sd 0:0:1:0: tag#1481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.440894][ C0] sd 0:0:1:0: tag#1481 CDB: opcode=0xe5 (vendor) [ 47.447241][ C0] sd 0:0:1:0: tag#1481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.456294][ C0] sd 0:0:1:0: tag#1481 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 02:07:47 executing program 0: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) [ 47.465340][ C0] sd 0:0:1:0: tag#1481 CDB[20]: ba 02:07:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001500)="2230887a0cba0d2333bfbadfd1be68aa72406e0a0d20") [ 47.496303][ C0] sd 0:0:1:0: tag#1482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.506161][ C0] sd 0:0:1:0: tag#1482 CDB: opcode=0xe5 (vendor) [ 47.512488][ C0] sd 0:0:1:0: tag#1482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.521533][ C0] sd 0:0:1:0: tag#1482 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.530595][ C0] sd 0:0:1:0: tag#1482 CDB[20]: ba [ 47.544519][ T22] audit: type=1326 audit(1631498867.388:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x4665f9 code=0x7ffc0000 02:07:47 executing program 0: rseq(&(0x7f00000012c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ptp', 0x0, 0x0) fsync(r0) 02:07:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:47 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:47 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) [ 47.618401][ T22] audit: type=1326 audit(1631498867.388:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.666789][ C0] sd 0:0:1:0: tag#1483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.671976][ C1] sd 0:0:1:0: tag#1484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.676637][ C0] sd 0:0:1:0: tag#1483 CDB: opcode=0xe5 (vendor) [ 47.687477][ C1] sd 0:0:1:0: tag#1484 CDB: opcode=0xe5 (vendor) [ 47.693771][ C0] sd 0:0:1:0: tag#1483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.700091][ C1] sd 0:0:1:0: tag#1484 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.709089][ C0] sd 0:0:1:0: tag#1483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.709106][ C0] sd 0:0:1:0: tag#1483 CDB[20]: ba [ 47.718109][ C1] sd 0:0:1:0: tag#1484 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.739257][ T22] audit: type=1326 audit(1631498867.388:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=74 compat=0 ip=0x4665f9 code=0x7ffc0000 02:07:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) [ 47.741208][ C1] sd 0:0:1:0: tag#1484 CDB[20]: ba [ 47.767031][ T22] audit: type=1326 audit(1631498867.388:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.808898][ C0] sd 0:0:1:0: tag#1486 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.818775][ C0] sd 0:0:1:0: tag#1486 CDB: opcode=0xe5 (vendor) [ 47.825108][ C0] sd 0:0:1:0: tag#1486 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.834125][ C0] sd 0:0:1:0: tag#1486 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.843235][ C0] sd 0:0:1:0: tag#1486 CDB[20]: ba [ 47.864993][ T22] audit: type=1326 audit(1631498867.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=334 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.889370][ T22] audit: type=1326 audit(1631498867.388:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.914031][ T22] audit: type=1326 audit(1631498867.398:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5291 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 47.923789][ C1] sd 0:0:1:0: tag#1485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.939609][ C0] sd 0:0:1:0: tag#1487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 47.947681][ C1] sd 0:0:1:0: tag#1485 CDB: opcode=0xe5 (vendor) [ 47.957469][ C0] sd 0:0:1:0: tag#1487 CDB: opcode=0xe5 (vendor) [ 47.963774][ C1] sd 0:0:1:0: tag#1485 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.970100][ C0] sd 0:0:1:0: tag#1487 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 47.979428][ C1] sd 0:0:1:0: tag#1485 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.988422][ C0] sd 0:0:1:0: tag#1487 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 47.997431][ C1] sd 0:0:1:0: tag#1485 CDB[20]: ba [ 48.006516][ C0] sd 0:0:1:0: tag#1487 CDB[20]: ba 02:07:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 02:07:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 3: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x8827, 0x7) syz_io_uring_setup(0x3ea0, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ded000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 02:07:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x8827, 0x7) syz_io_uring_setup(0x3ea0, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ded000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 02:07:48 executing program 3: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x640000, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000001540)=""/188}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {0x0, r11}, {r10, 0x0}, {r10}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r9}, {0x0}, {0x0, 0x0}, {}, {r9, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {}, {0x0, r11}, {r10, r6}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {r9, r11}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r4, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9, r11}, {0x0}, {r9}, {0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r10}, {r9}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, r11}, {r9, 0x0}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {r9, 0x0}, {0x0, r11}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, 0x0}, {0x0}, {r9, r11}, {r9, 0x0}, {r10, r11}, {0x0}, {r9}, {r9, r11}, {0x0}, {0x0}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {0x0}, {}, {r9, r11}, {}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {0x0, 0x0}, {r10, r11}, {r10}, {0x0, 0x0}, {r9, r11}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r10, 0x0}, {r9, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0}, {0x0, r11}, {0x0, 0x0}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9}, {r9, 0x0}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9, 0x0}, {}, {r9, 0x0}, {0x0, r11}, {r10, 0x0}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r11}, {r10, 0x0}, {r9}, {0x0, 0x0}, {r9, 0x0}, {r9, 0x0}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r10, r11}, {0x0}, {0x0, 0x0}, {0x0}, {r9, r11}, {r10}, {0x0, r11}, {0x0, 0x0}, {0x0, 0x0}, {r9, 0x0}, {0x0, 0x0}, {r9, 0x0}, {r10, 0x0}, {0x0}, {r9, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {r9, 0x0}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0}, {0x0, 0x0}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {}, {0x0, r11}, {r9, 0x0}, {r10, r11}, {r10, r11}, {r10, 0x0}, {r10, r11}, {r9, r11}, {}, {0x0, 0x0}, {r10, 0x0}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, 0x0}, {r10, 0x0}, {r10, 0x0}, {r9, 0x0}, {0x0}, {r10, 0x0}, {r10, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, r11}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r4, 0x80000000, 0x3f, 0x1, 0x1ff, 0xfff, 0x101, 0xffff8001, 0x4, 0x183b, 0x0, 0x8, 0x4, 0xfffffffffffffff9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001600)={0x8, [{r126, r156}, {0x0, r129}, {r188, r279}, {r162, r296}, {r49, r70}, {r207, r66}, {r151}, {r94, r247}, {r309, r239}, {r212, r289}, {r193, r234}, {r119, r201}, {r106}, {r295, r81}, {r69, r269}, {r159, r107}, {0x0, r158}, {r182, r217}, {r186}, {r186, r303}, {r15}, {r280, r127}, {r140, r164}, {r191}, {0x0, r183}, {0x0, r52}, {r213, r17}, {r144, r319}, {0x0, r264}, {r41, r271}, {r318}, {r262, r308}, {0x0, r80}, {r121, r237}, {r152, r17}, {r84, r52}, {r323, r24}, {r139, r224}, {r184}, {r209, r255}, {r170, r62}, {r195, r327}, {r43, r292}, {0x0, r240}, {r302, r116}, {r4, r147}, {r130, r68}, {r67, r197}, {r67, r242}, {r38, r114}, {r154, r90}, {r302, r26}, {r18, r86}, {r228, r294}, {r297, r145}, {r291, r161}, {r163, r204}, {r313}, {r270, r122}, {r96, r123}, {r293}, {0x0, r265}, {r58, r214}, {r33, r153}, {r260, r168}, {r167}, {}, {r252, r59}, {r287, r138}, {r104, r164}, {r291, r255}, {r10, r312}, {r299, r118}, {r329, r285}, {r302, r278}, {r233, r40}, {r157, r275}, {r254, r143}, {r103}, {0x0, r32}, {r205, r314}, {r106, r73}, {0x0, r298}, {r140, r29}, {r148, r90}, {0x0, r24}, {0x0, r34}, {r244, r135}, {r295, r133}, {r148, r24}, {r18, r156}, {0x0, r164}, {r172, r68}, {r148, r97}, {r87, r194}, {r148, r171}, {r165, r234}, {r207, r160}, {r307, r226}, {r146, r109}, {r309, r267}, {r252, r328}, {r60}, {}, {r76, r222}, {r21, r294}, {r254}, {r238, r230}, {r276}, {r216, r278}, {r89, r281}, {r115}, {r270, r129}, {r258, r34}, {r61, r181}, {0x0, r277}, {r25, r198}, {r115, r74}, {r136, r263}, {r46, r278}, {r177, r158}, {r202}, {r31, r32}, {r23, r102}, {}, {0x0, r149}, {r273, r312}, {r14, r24}, {r96, r243}, {r209, r122}, {r223, r42}, {0x0, r271}, {r288, r206}, {r126}, {r248, r52}, {r126}, {r223, r264}, {r288}, {r268, r78}, {r176, r192}, {}, {r51, r20}, {r36, r137}, {r13, r310}, {r189, r201}, {r38, r70}, {r96, r304}, {0x0, r283}, {r245, r17}, {r30, r200}, {r301, r243}, {r53, r292}, {r38, r80}, {r284, r321}, {r134, r128}, {r65}, {r15, r116}, {0x0, r194}, {r231, r143}, {r60}, {0x0, r326}, {r142, r249}, {r41, r237}, {r231, r326}, {r286}, {r101}, {r141}, {r151, r98}, {0x0, r316}, {r148, r105}, {r101, r98}, {r19, r198}, {r5, r12}, {r221}, {r315}, {r152, r226}, {r39, r311}, {r154, r111}, {r4, r278}, {r18, r85}, {r104, r153}, {r82, r158}, {r322, r105}, {r58, r275}, {r67, r274}, {r39, r264}, {r172, r133}, {r115, r199}, {r257, r50}, {r69, r52}, {0x0, r235}, {r297, r85}, {r99, r173}, {r257, r143}, {r47}, {r100, r190}, {r257, r26}, {0x0, r211}, {0x0, r16}, {0x0, r88}, {r132}, {r225, r64}, {r75, r120}, {r57}, {r15, r42}, {r113, r292}, {r320, r218}, {r41, r234}, {r212, r155}, {r93, r259}, {r126, r304}, {0x0, r208}, {r79, r219}, {}, {r108, r98}, {r290, r266}, {}, {r55, r211}, {r221, r181}, {r290, r150}, {r305}, {0x0, r20}, {r186, r289}, {}, {r213}, {}, {r89, r253}, {r14, r306}, {}, {r286, r164}, {r325}, {r148, r137}, {r236, r203}, {r329}, {r39, r229}, {r104, r27}, {}, {0x0, r68}, {r103}, {r175, r44}, {r18}, {r45, r164}, {r43, r109}, {r244}, {r100, r64}, {0x0, r135}, {r91, r311}, {r76, r133}, {r134, r300}, {r136, r180}, {r72, r261}, {r141}, {r193, r173}, {r309, r37}, {r69}], 0x8, "b7020d2e185e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000057780)={0x8, [{}, {r317, r95}, {0x0, r179}, {0x0, r12}, {}, {0x0, r92}, {}, {0x0, r330}, {}, {}, {0x0, r271}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {0x0, r125}, {r43}, {}, {r177}, {r63}, {}, {0x0, r171}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r175, r56}, {r209, r269}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r208}, {}, {}, {r49}, {}, {r189}, {0x0, r269}, {}, {r28}, {}, {}, {r174}, {0x0, r283}, {}, {0x0, r272}, {r207}, {}, {}, {0x0, r227}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r83}, {}, {}, {}, {0x0, r122}, {}, {}, {}, {}, {}, {0x0, r328}, {r166}, {r94}, {0x0, r35}, {}, {r18}, {}, {r220, r127}, {0x0, r168}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r71}, {}, {}, {}, {}, {}, {}, {}, {r124, r289}, {}, {}, {0x0, r86}, {r189}, {0x0, r251}, {r186}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {r241}, {}, {0x0, r324}, {}, {}, {}, {}, {}, {r89}, {0x0, r54}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r84}, {}, {}, {}, {}, {r47}, {0x0, r266}, {r28}, {}, {r112}, {}, {}, {r96, r210}, {}, {}, {r148}, {0x0, r185}, {0x0, r64}, {}, {0x0, r77}, {}, {}, {}, {}, {0x0, r110}, {}, {r250}, {0x0, r81}, {r256}, {}, {}, {r36}, {}, {r241}, {}, {0x0, r215}, {}, {}, {}, {}, {}, {}, {}, {0x0, r150}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {r136}, {}, {}, {0x0, r138}, {0x0, r272}, {}, {}, {}, {}, {}, {}, {0x0, r48}, {r244}, {r19}, {0x0, r232}, {}, {}, {}, {}, {0x0, r42}, {}, {}, {r282, r164}, {}, {0x0, r147}, {}, {r134}, {}, {}, {}, {}, {r196}, {}, {r178}, {}, {}, {r117}, {r104}, {r132, r246}, {}, {}, {}, {r139, r149}, {}, {r169}, {}, {}, {}, {}, {}, {}, {}, {}, {r273}, {}, {0x0, r24}], 0x8, "3173ce2bee63c3"}) r331 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r331) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 02:07:48 executing program 2: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x8827, 0x7) syz_io_uring_setup(0x3ea0, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ded000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 02:07:48 executing program 3: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3e, 0x0, &(0x7f00000000c0)) 02:07:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x8827, 0x7) syz_io_uring_setup(0x3ea0, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ded000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 02:07:48 executing program 3: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 2: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 4: r0 = socket$inet6(0xa, 0x20000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000001a40)) 02:07:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x15}, {0x40}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:07:48 executing program 2: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 02:07:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:48 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x15}, {0x40}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:07:48 executing program 2: rt_sigqueueinfo(0xffffffffffffffff, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x6}) 02:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x15}, {0x40}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:07:48 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:48 executing program 2: rt_sigqueueinfo(0xffffffffffffffff, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x6}) 02:07:49 executing program 4: r0 = socket$inet6(0xa, 0x20000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000001a40)) 02:07:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x15}, {0x40}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:07:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:49 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:49 executing program 2: rt_sigqueueinfo(0xffffffffffffffff, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x6}) 02:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:49 executing program 2: rt_sigqueueinfo(0xffffffffffffffff, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x6}) 02:07:49 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:49 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:50 executing program 4: r0 = socket$inet6(0xa, 0x20000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000001a40)) 02:07:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:50 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006}]}, 0x10) 02:07:50 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:50 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006}]}, 0x10) 02:07:50 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006}]}, 0x10) 02:07:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 02:07:50 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000002940)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 02:07:50 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006}]}, 0x10) 02:07:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 02:07:51 executing program 4: r0 = socket$inet6(0xa, 0x20000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x894b, &(0x7f0000001a40)) 02:07:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) 02:07:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:07:51 executing program 0: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000040)=@v2, 0x14, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '-\x00'}, 0x0, 0x2) 02:07:51 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xcd, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 02:07:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 02:07:51 executing program 0: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000040)=@v2, 0x14, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '-\x00'}, 0x0, 0x2) 02:07:51 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xcd, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 02:07:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2) 02:07:51 executing program 0: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000040)=@v2, 0x14, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '-\x00'}, 0x0, 0x2) [ 51.800192][ T5616] ================================================================== [ 51.808278][ T5616] BUG: KCSAN: data-race in audit_log_start / skb_queue_tail [ 51.815572][ T5616] [ 51.817881][ T5616] write to 0xffffffff84168b48 of 4 bytes by task 5606 on cpu 1: [ 51.825595][ T5616] skb_queue_tail+0x80/0xa0 [ 51.830091][ T5616] audit_log_end+0x171/0x1e0 [ 51.834685][ T5616] audit_seccomp+0xd9/0xf0 [ 51.839173][ T5616] __seccomp_filter+0xdf5/0xe40 [ 51.844014][ T5616] __secure_computing+0xfb/0x140 [ 51.849121][ T5616] syscall_trace_enter+0x120/0x290 [ 51.854238][ T5616] syscall_enter_from_user_mode+0x1c/0x20 [ 51.859956][ T5616] do_syscall_64+0x25/0xa0 [ 51.864374][ T5616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.870353][ T5616] [ 51.872668][ T5616] read to 0xffffffff84168b48 of 4 bytes by task 5616 on cpu 0: [ 51.880202][ T5616] audit_log_start+0x19c/0x6b0 [ 51.884965][ T5616] audit_seccomp+0x45/0xf0 [ 51.889370][ T5616] __seccomp_filter+0xdf5/0xe40 [ 51.894217][ T5616] __secure_computing+0xfb/0x140 [ 51.899148][ T5616] syscall_trace_enter+0x120/0x290 [ 51.904258][ T5616] syscall_enter_from_user_mode+0x1c/0x20 [ 51.909968][ T5616] do_syscall_64+0x25/0xa0 [ 51.914377][ T5616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.920285][ T5616] [ 51.922598][ T5616] value changed: 0x00000001 -> 0x00000000 [ 51.928298][ T5616] [ 51.930608][ T5616] Reported by Kernel Concurrency Sanitizer on: [ 51.936735][ T5616] CPU: 0 PID: 5616 Comm: y<ü 0x00000005 [ 52.601064][ T22] [ 52.603369][ T22] Reported by Kernel Concurrency Sanitizer on: [ 52.609508][ T22] CPU: 1 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 52.617391][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.627431][ T22] ================================================================== [ 52.726360][ T22] ================================================================== [ 52.734545][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 52.741752][ T22] [ 52.744063][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5606 on cpu 1: [ 52.751682][ T22] skb_queue_tail+0x80/0xa0 [ 52.756185][ T22] audit_log_end+0x171/0x1e0 [ 52.760782][ T22] audit_seccomp+0xd9/0xf0 [ 52.765198][ T22] __seccomp_filter+0xdf5/0xe40 [ 52.770044][ T22] __secure_computing+0xfb/0x140 [ 52.774980][ T22] syscall_trace_enter+0x120/0x290 [ 52.780093][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 52.785891][ T22] do_syscall_64+0x25/0xa0 [ 52.790308][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.796311][ T22] [ 52.798622][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 0: [ 52.805977][ T22] kauditd_thread+0x4d7/0x6e0 [ 52.810661][ T22] kthread+0x262/0x280 [ 52.814724][ T22] ret_from_fork+0x1f/0x30 [ 52.819145][ T22] [ 52.821454][ T22] value changed: 0x00000000 -> 0x00000001 [ 52.827156][ T22] [ 52.829472][ T22] Reported by Kernel Concurrency Sanitizer on: [ 52.835605][ T22] CPU: 0 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 52.843500][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.853632][ T22] ================================================================== [ 53.950523][ T22] ================================================================== [ 53.958715][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 53.965927][ T22] [ 53.968237][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5616 on cpu 0: [ 53.975896][ T22] skb_queue_tail+0x80/0xa0 [ 53.980397][ T22] audit_log_end+0x171/0x1e0 [ 53.984983][ T22] audit_seccomp+0xd9/0xf0 [ 53.989401][ T22] __seccomp_filter+0xdf5/0xe40 [ 53.994422][ T22] __secure_computing+0xfb/0x140 [ 53.999385][ T22] syscall_trace_enter+0x120/0x290 [ 54.004497][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 54.010300][ T22] do_syscall_64+0x25/0xa0 [ 54.014717][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.020628][ T22] [ 54.022942][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 1: [ 54.030296][ T22] kauditd_thread+0x53c/0x6e0 [ 54.034972][ T22] kthread+0x262/0x280 [ 54.039045][ T22] ret_from_fork+0x1f/0x30 [ 54.043458][ T22] [ 54.045764][ T22] value changed: 0x00000000 -> 0x00000001 [ 54.051477][ T22] [ 54.053814][ T22] Reported by Kernel Concurrency Sanitizer on: [ 54.059945][ T22] CPU: 1 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 54.067825][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.078046][ T22] ================================================================== 02:07:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:07:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2) 02:07:54 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x34, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x121005) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db982000000000a146175dd1c7ec5800009c5c95"], 0xab) 02:07:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b07073f003163"], 0x40) 02:07:54 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xcd, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2) 02:07:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:07:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x121005) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db982000000000a146175dd1c7ec5800009c5c95"], 0xab) 02:07:54 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x34, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b07073f003163"], 0x40) 02:07:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000000c0)=@l2tp={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2) [ 56.170722][ T22] ================================================================== [ 56.178820][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 56.186026][ T22] [ 56.188339][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5672 on cpu 1: [ 56.195954][ T22] skb_queue_tail+0x80/0xa0 [ 56.200456][ T22] audit_log_end+0x171/0x1e0 [ 56.205047][ T22] audit_seccomp+0xd9/0xf0 [ 56.209455][ T22] __seccomp_filter+0xdf5/0xe40 [ 56.214296][ T22] __secure_computing+0xfb/0x140 [ 56.219231][ T22] syscall_trace_enter+0x120/0x290 [ 56.224343][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 56.230227][ T22] do_syscall_64+0x25/0xa0 [ 56.234640][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.240531][ T22] [ 56.242841][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 0: [ 56.250284][ T22] kauditd_thread+0x4d7/0x6e0 [ 56.254966][ T22] kthread+0x262/0x280 [ 56.259031][ T22] ret_from_fork+0x1f/0x30 [ 56.263440][ T22] [ 56.265748][ T22] value changed: 0x00000000 -> 0x00000001 [ 56.271442][ T22] [ 56.273750][ T22] Reported by Kernel Concurrency Sanitizer on: [ 56.279875][ T22] CPU: 0 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 56.287755][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.297793][ T22] ================================================================== [ 56.621853][ T5672] ================================================================== [ 56.629947][ T5672] BUG: KCSAN: data-race in audit_log_start / skb_queue_tail [ 56.637229][ T5672] [ 56.639539][ T5672] write to 0xffffffff84168b48 of 4 bytes by task 5659 on cpu 0: [ 56.647152][ T5672] skb_queue_tail+0x80/0xa0 [ 56.651650][ T5672] audit_log_end+0x171/0x1e0 [ 56.656230][ T5672] audit_seccomp+0xd9/0xf0 [ 56.660636][ T5672] __seccomp_filter+0xdf5/0xe40 [ 56.665481][ T5672] __secure_computing+0xfb/0x140 [ 56.670425][ T5672] syscall_trace_enter+0x120/0x290 [ 56.675531][ T5672] syscall_enter_from_user_mode+0x1c/0x20 [ 56.681244][ T5672] do_syscall_64+0x25/0xa0 [ 56.685658][ T5672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.691547][ T5672] [ 56.693863][ T5672] read to 0xffffffff84168b48 of 4 bytes by task 5672 on cpu 1: [ 56.701391][ T5672] audit_log_start+0x19c/0x6b0 [ 56.706154][ T5672] audit_seccomp+0x45/0xf0 [ 56.710561][ T5672] __seccomp_filter+0xdf5/0xe40 [ 56.715409][ T5672] __secure_computing+0xfb/0x140 [ 56.720339][ T5672] syscall_trace_enter+0x120/0x290 [ 56.725444][ T5672] syscall_enter_from_user_mode+0x1c/0x20 [ 56.731167][ T5672] do_syscall_64+0x25/0xa0 [ 56.735577][ T5672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.741564][ T5672] [ 56.743872][ T5672] value changed: 0x00000000 -> 0x00000001 [ 56.749573][ T5672] [ 56.751879][ T5672] Reported by Kernel Concurrency Sanitizer on: [ 56.758011][ T5672] CPU: 1 PID: 5672 Comm: y<ü\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:07:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x121005) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db982000000000a146175dd1c7ec5800009c5c95"], 0xab) 02:07:57 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x34, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b07073f003163"], 0x40) 02:07:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:07:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 57.437883][ T22] audit: type=1326 audit(1631498877.378:77696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5651 comm=20793CFC3C44624FE5C353EF7ED58A exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x50000 02:07:57 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x34, &(0x7f00000002c0)="8de208f1679d915745c9f7251cce03ab26a25750cb070000006083f3cf09690f0800000076751e3811ac9d0dd3fd000000000027"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r1, 0x3a) 02:07:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b07073f003163"], 0x40) 02:07:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x121005) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000e4ffff0f3605f64017db982000000000a146175dd1c7ec5800009c5c95"], 0xab) 02:07:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) 02:07:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3621}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r0}) r1 = socket$inet(0x2, 0x1, 0x10004) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000100)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x10, 0xffffffffffffffff, 0x19a01000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008, 0x2010, r2, 0x4000) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000d80)=""/280, 0x118}, {&(0x7f0000000c40)=""/198, 0xc6}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000b40)=""/205, 0xcd}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000340)=""/52, 0x34}], 0xc, 0xd6, 0xfe) accept$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000240)=0x6e) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000280)='vfat\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fork() readlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000009c0)=""/9, 0x9) ptrace(0x10, r4) 02:07:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}}, 0x0) [ 58.247304][ T22] ================================================================== [ 58.255396][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 58.262596][ T22] [ 58.264913][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5696 on cpu 0: [ 58.272527][ T22] skb_queue_tail+0x80/0xa0 [ 58.277025][ T22] audit_log_end+0x171/0x1e0 [ 58.281608][ T22] audit_seccomp+0xd9/0xf0 [ 58.286013][ T22] __seccomp_filter+0xdf5/0xe40 [ 58.290866][ T22] __secure_computing+0xfb/0x140 [ 58.296058][ T22] syscall_trace_enter+0x120/0x290 [ 58.301160][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 58.306867][ T22] do_syscall_64+0x25/0xa0 [ 58.311279][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.317165][ T22] [ 58.319475][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 1: [ 58.326843][ T22] kauditd_thread+0x612/0x6e0 [ 58.331523][ T22] kthread+0x262/0x280 [ 58.335589][ T22] ret_from_fork+0x1f/0x30 [ 58.340006][ T22] [ 58.342325][ T22] value changed: 0x00000001 -> 0x00000002 [ 58.348028][ T22] [ 58.350339][ T22] Reported by Kernel Concurrency Sanitizer on: [ 58.356471][ T22] CPU: 1 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 58.364354][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.374395][ T22] ================================================================== [ 59.121686][ T22] ================================================================== [ 59.129787][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 59.136996][ T22] [ 59.139308][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5693 on cpu 0: [ 59.147019][ T22] skb_queue_tail+0x80/0xa0 [ 59.151519][ T22] audit_log_end+0x171/0x1e0 [ 59.156114][ T22] audit_seccomp+0xd9/0xf0 [ 59.160518][ T22] __seccomp_filter+0xdf5/0xe40 [ 59.165376][ T22] __secure_computing+0xfb/0x140 [ 59.170312][ T22] syscall_trace_enter+0x120/0x290 [ 59.175420][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 59.181127][ T22] do_syscall_64+0x25/0xa0 [ 59.185636][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.191525][ T22] [ 59.193850][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 1: [ 59.201216][ T22] kauditd_thread+0x53c/0x6e0 [ 59.205891][ T22] kthread+0x262/0x280 [ 59.209952][ T22] ret_from_fork+0x1f/0x30 [ 59.214355][ T22] [ 59.216701][ T22] value changed: 0x00000000 -> 0x00000001 [ 59.222404][ T22] [ 59.224720][ T22] Reported by Kernel Concurrency Sanitizer on: [ 59.230853][ T22] CPU: 1 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 59.238735][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.248778][ T22] ================================================================== 02:08:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) 02:08:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:08:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}}, 0x0) 02:08:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:08:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) 02:08:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=' y<\xfc\x91\x10') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:08:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}}, 0x0) 02:08:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) 02:08:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}}, 0x0) 02:08:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = getpgid(0x0) setpriority(0x1, r1, 0x0) [ 61.223300][ T22] ================================================================== [ 61.231404][ T22] BUG: KCSAN: data-race in kauditd_thread / skb_queue_tail [ 61.238608][ T22] [ 61.240925][ T22] write to 0xffffffff84168b48 of 4 bytes by task 5726 on cpu 0: [ 61.248545][ T22] skb_queue_tail+0x80/0xa0 [ 61.253040][ T22] audit_log_end+0x171/0x1e0 [ 61.257626][ T22] audit_seccomp+0xd9/0xf0 [ 61.262033][ T22] __seccomp_filter+0xdf5/0xe40 [ 61.266873][ T22] __secure_computing+0xfb/0x140 [ 61.271802][ T22] syscall_trace_enter+0x120/0x290 [ 61.276909][ T22] syscall_enter_from_user_mode+0x1c/0x20 [ 61.282622][ T22] do_syscall_64+0x25/0xa0 [ 61.287037][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.293362][ T22] [ 61.295678][ T22] read to 0xffffffff84168b48 of 4 bytes by task 22 on cpu 1: [ 61.303032][ T22] kauditd_thread+0x4d7/0x6e0 [ 61.307706][ T22] kthread+0x262/0x280 [ 61.311765][ T22] ret_from_fork+0x1f/0x30 [ 61.316170][ T22] [ 61.318476][ T22] value changed: 0x00000000 -> 0x00000001 [ 61.324180][ T22] [ 61.326490][ T22] Reported by Kernel Concurrency Sanitizer on: [ 61.332624][ T22] CPU: 1 PID: 22 Comm: kauditd Not tainted 5.15.0-rc1-syzkaller #0 [ 61.340513][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.350560][ T22] ==================================================================