00)={0x0, 0x0, 0x0, 0x0, 0x0, "beda4211941cb093"}) 04:09:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 04:09:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "97058338828ee6e2ff857e9bf9f66bb5e49fe1"}) ioctl$TCSETA(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "beda4211941cb093"}) 04:09:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 04:09:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 04:09:21 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window, @mss, @timestamp, @window={0x3, 0x9}, @window, @window, @sack_perm, @sack_perm], 0x20e4) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) 04:09:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "97058338828ee6e2ff857e9bf9f66bb5e49fe1"}) ioctl$TCSETA(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "beda4211941cb093"}) 04:09:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 04:09:21 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 04:09:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "97058338828ee6e2ff857e9bf9f66bb5e49fe1"}) ioctl$TCSETA(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "beda4211941cb093"}) 04:09:21 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:09:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 04:09:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "97058338828ee6e2ff857e9bf9f66bb5e49fe1"}) ioctl$TCSETA(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "beda4211941cb093"}) 04:09:21 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 04:09:21 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 04:09:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 04:09:21 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:09:22 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window, @mss, @timestamp, @window={0x3, 0x9}, @window, @window, @sack_perm, @sack_perm], 0x20e4) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) 04:09:22 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:09:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x2000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffc, 0x7d, 0x3, @buffer={0x0, 0x2e, &(0x7f0000000380)=""/46}, &(0x7f00000003c0)="ec6ae19e1369cd816b2eff7da6789031b934b6c1a05ec17ee603e392807361cd3eea8dc8fd0fd8e0fd2532893972256a6c484a4a88bb98f0049ba88f95f09aed66b6b0db85018c6ef0abda0ed8c60c1afaf29242ac592eb524bd3b4c99bc0a22c0baeddc7af6f27ad84188b4878bf9d0f7f3e17e07e647d20c6557eac7", &(0x7f0000000440)=""/139, 0x7fffffff, 0x1, 0x2, &(0x7f0000000500)}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000005c0)) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x28, 0x3, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000040)=""/249, 0xf9}]}, &(0x7f0000000180)="c9fd5be21c6f25012a81de4da5f74d8c9e7ecce445b4d7e133a4dc64de88d8ffe7f2fc1cc2c02d4b", &(0x7f00000001c0)=""/241, 0x2, 0x0, 0x2, &(0x7f00000002c0)}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 04:09:22 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 04:09:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 04:09:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:22 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:09:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 168.878697][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 168.878722][ C1] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 168.895099][ C1] sd 0:0:1:0: tag#676 CDB: opcode=0xc9 (vendor) [ 168.901394][ C1] sd 0:0:1:0: tag#676 CDB[00]: c9 fd 5b e2 1c 6f 25 01 2a 81 de 4d a5 f7 4d 8c [ 168.910435][ C1] sd 0:0:1:0: tag#676 CDB[10]: 9e 7e cc e4 45 b4 d7 e1 33 a4 dc 64 de 88 d8 ff [ 168.920333][ C1] sd 0:0:1:0: tag#676 CDB[20]: e7 f2 fc 1c c2 c0 2d 4b 04:09:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:22 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) [ 168.928737][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.955195][ C1] sd 0:0:1:0: tag#677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 168.964972][ C1] sd 0:0:1:0: tag#677 CDB: opcode=0xc9 (vendor) 04:09:22 executing program 4: sync() sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 04:09:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000001c0), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 168.971236][ C1] sd 0:0:1:0: tag#677 CDB[00]: c9 fd 5b e2 1c 6f 25 01 2a 81 de 4d a5 f7 4d 8c [ 168.980192][ C1] sd 0:0:1:0: tag#677 CDB[10]: 9e 7e cc e4 45 b4 d7 e1 33 a4 dc 64 de 88 d8 ff [ 168.989134][ C1] sd 0:0:1:0: tag#677 CDB[20]: e7 f2 fc 1c c2 c0 2d 4b [ 169.003324][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:23 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window, @mss, @timestamp, @window={0x3, 0x9}, @window, @window, @sack_perm, @sack_perm], 0x20e4) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) 04:09:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x2000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffc, 0x7d, 0x3, @buffer={0x0, 0x2e, &(0x7f0000000380)=""/46}, &(0x7f00000003c0)="ec6ae19e1369cd816b2eff7da6789031b934b6c1a05ec17ee603e392807361cd3eea8dc8fd0fd8e0fd2532893972256a6c484a4a88bb98f0049ba88f95f09aed66b6b0db85018c6ef0abda0ed8c60c1afaf29242ac592eb524bd3b4c99bc0a22c0baeddc7af6f27ad84188b4878bf9d0f7f3e17e07e647d20c6557eac7", &(0x7f0000000440)=""/139, 0x7fffffff, 0x1, 0x2, &(0x7f0000000500)}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000005c0)) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x28, 0x3, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000040)=""/249, 0xf9}]}, &(0x7f0000000180)="c9fd5be21c6f25012a81de4da5f74d8c9e7ecce445b4d7e133a4dc64de88d8ffe7f2fc1cc2c02d4b", &(0x7f00000001c0)=""/241, 0x2, 0x0, 0x2, &(0x7f00000002c0)}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 04:09:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="000d364d0012a80c063c5c999ab743aebe", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:09:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000473d, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="11", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="11", 0x1, 0x40006, 0x0, 0x0) 04:09:23 executing program 4: sync() sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 04:09:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) [ 169.804382][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.805794][ C1] sd 0:0:1:0: tag#668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 169.823550][ C1] sd 0:0:1:0: tag#668 CDB: opcode=0xc9 (vendor) [ 169.829859][ C1] sd 0:0:1:0: tag#668 CDB[00]: c9 fd 5b e2 1c 6f 25 01 2a 81 de 4d a5 f7 4d 8c [ 169.838794][ C1] sd 0:0:1:0: tag#668 CDB[10]: 9e 7e cc e4 45 b4 d7 e1 33 a4 dc 64 de 88 d8 ff [ 169.840931][ T6469] validate_nla: 3 callbacks suppressed 04:09:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x2000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffc, 0x7d, 0x3, @buffer={0x0, 0x2e, &(0x7f0000000380)=""/46}, &(0x7f00000003c0)="ec6ae19e1369cd816b2eff7da6789031b934b6c1a05ec17ee603e392807361cd3eea8dc8fd0fd8e0fd2532893972256a6c484a4a88bb98f0049ba88f95f09aed66b6b0db85018c6ef0abda0ed8c60c1afaf29242ac592eb524bd3b4c99bc0a22c0baeddc7af6f27ad84188b4878bf9d0f7f3e17e07e647d20c6557eac7", &(0x7f0000000440)=""/139, 0x7fffffff, 0x1, 0x2, &(0x7f0000000500)}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000005c0)) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x28, 0x3, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000040)=""/249, 0xf9}]}, &(0x7f0000000180)="c9fd5be21c6f25012a81de4da5f74d8c9e7ecce445b4d7e133a4dc64de88d8ffe7f2fc1cc2c02d4b", &(0x7f00000001c0)=""/241, 0x2, 0x0, 0x2, &(0x7f00000002c0)}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 04:09:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="000d364d0012a80c063c5c999ab743aebe", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 169.840941][ T6469] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 169.847754][ C1] sd 0:0:1:0: tag#668 CDB[20]: e7 f2 fc 1c c2 c0 2d 4b [ 169.853196][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:23 executing program 4: sync() sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 04:09:23 executing program 5: times(&(0x7f0000000140)) 04:09:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x2d}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='4', 0x1}], 0x1) [ 169.920339][ C0] sd 0:0:1:0: tag#657 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 169.930394][ C0] sd 0:0:1:0: tag#657 CDB: opcode=0xc9 (vendor) [ 169.936637][ C0] sd 0:0:1:0: tag#657 CDB[00]: c9 fd 5b e2 1c 6f 25 01 2a 81 de 4d a5 f7 4d 8c [ 169.945629][ C0] sd 0:0:1:0: tag#657 CDB[10]: 9e 7e cc e4 45 b4 d7 e1 33 a4 dc 64 de 88 d8 ff [ 169.954674][ C0] sd 0:0:1:0: tag#657 CDB[20]: e7 f2 fc 1c c2 c0 2d 4b 04:09:24 executing program 4: sync() sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 04:09:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xc4, 0x1b, 0x301, 0x0, 0x0, {{@in=@empty, @in6=@private2={0xfc, 0x3}, 0x0, 0x0, 0x2, 0x0, 0xa}, {0x0, 0x1f}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 04:09:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x2000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffc, 0x7d, 0x3, @buffer={0x0, 0x2e, &(0x7f0000000380)=""/46}, &(0x7f00000003c0)="ec6ae19e1369cd816b2eff7da6789031b934b6c1a05ec17ee603e392807361cd3eea8dc8fd0fd8e0fd2532893972256a6c484a4a88bb98f0049ba88f95f09aed66b6b0db85018c6ef0abda0ed8c60c1afaf29242ac592eb524bd3b4c99bc0a22c0baeddc7af6f27ad84188b4878bf9d0f7f3e17e07e647d20c6557eac7", &(0x7f0000000440)=""/139, 0x7fffffff, 0x1, 0x2, &(0x7f0000000500)}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000005c0)) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x28, 0x3, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000040)=""/249, 0xf9}]}, &(0x7f0000000180)="c9fd5be21c6f25012a81de4da5f74d8c9e7ecce445b4d7e133a4dc64de88d8ffe7f2fc1cc2c02d4b", &(0x7f00000001c0)=""/241, 0x2, 0x0, 0x2, &(0x7f00000002c0)}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 04:09:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x2d}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='4', 0x1}], 0x1) 04:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) [ 170.651005][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.660605][ C1] sd 0:0:1:0: tag#696 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 170.670381][ C1] sd 0:0:1:0: tag#696 CDB: opcode=0xc9 (vendor) [ 170.676616][ C1] sd 0:0:1:0: tag#696 CDB[00]: c9 fd 5b e2 1c 6f 25 01 2a 81 de 4d a5 f7 4d 8c [ 170.685580][ C1] sd 0:0:1:0: tag#696 CDB[10]: 9e 7e cc e4 45 b4 d7 e1 33 a4 dc 64 de 88 d8 ff [ 170.694521][ C1] sd 0:0:1:0: tag#696 CDB[20]: e7 f2 fc 1c c2 c0 2d 4b 04:09:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) 04:09:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x2d}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='4', 0x1}], 0x1) 04:09:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)="d6", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x2) 04:09:26 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="000d364d0012a80c063c5c999ab743aebe", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:09:26 executing program 1: setresuid(0xee00, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffb) 04:09:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) 04:09:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x24}, {0x2d}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='4', 0x1}], 0x1) 04:09:26 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x6e4, 0x4) sendmmsg$inet6(r1, &(0x7f0000007680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) 04:09:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)="d6", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x2) 04:09:26 executing program 1: setresuid(0xee00, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffb) 04:09:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr\x00') openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) 04:09:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)="d6", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x2) 04:09:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) 04:09:26 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x6e4, 0x4) sendmmsg$inet6(r1, &(0x7f0000007680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) 04:09:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr\x00') openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) 04:09:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="000d364d0012a80c063c5c999ab743aebe", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:09:29 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1ee, &(0x7f0000000300)=[{&(0x7f0000000280)=""/117, 0x200001b5}], 0x1, 0x0) 04:09:29 executing program 1: setresuid(0xee00, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffb) 04:09:29 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x6e4, 0x4) sendmmsg$inet6(r1, &(0x7f0000007680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) 04:09:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)="d6", 0x1}], 0x1}}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x2) 04:09:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr\x00') openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) 04:09:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr\x00') openat$cgroup_int(r0, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) 04:09:29 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x6e4, 0x4) sendmmsg$inet6(r1, &(0x7f0000007680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) 04:09:29 executing program 1: setresuid(0xee00, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffb) 04:09:29 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r0, 0x0) 04:09:29 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x84040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r0) 04:09:29 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d746370063e6f72743d3078303030303030303030303030303030302c726f6f74636f6e746578743d73797374656d5f752222415238d1f952d3ad4291add65556a44cb105be5046b8d1f948a9ca3786634a818283eac897721215790c1c38948e0dc8fdd6f8f23c30c23b403615b4ca69be5deb44653dfab1"]) 04:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x45}, {0x1d}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) [ 176.043469][ T6556] 9pnet: Could not find request transport: tcp>ort=0x0000000000000000 [ 176.065658][ T6560] 9pnet: Could not find request transport: tcp>ort=0x0000000000000000 04:09:29 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r0, 0x0) 04:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x45}, {0x1d}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:29 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d746370063e6f72743d3078303030303030303030303030303030302c726f6f74636f6e746578743d73797374656d5f752222415238d1f952d3ad4291add65556a44cb105be5046b8d1f948a9ca3786634a818283eac897721215790c1c38948e0dc8fdd6f8f23c30c23b403615b4ca69be5deb44653dfab1"]) 04:09:29 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x84040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r0) 04:09:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20004091, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 04:09:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 04:09:29 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r0, 0x0) 04:09:30 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d746370063e6f72743d3078303030303030303030303030303030302c726f6f74636f6e746578743d73797374656d5f752222415238d1f952d3ad4291add65556a44cb105be5046b8d1f948a9ca3786634a818283eac897721215790c1c38948e0dc8fdd6f8f23c30c23b403615b4ca69be5deb44653dfab1"]) 04:09:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x45}, {0x1d}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:30 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) [ 176.159634][ T6571] 9pnet: Could not find request transport: tcp>ort=0x0000000000000000 [ 176.173216][ T6577] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 04:09:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x84040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r0) [ 176.207731][ T6581] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 176.231081][ T22] kauditd_printk_skb: 29 callbacks suppressed 04:09:30 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r0, 0x0) 04:09:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x84040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r0) 04:09:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 04:09:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x45}, {0x1d}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) [ 176.231091][ T22] audit: type=1400 audit(1635307770.029:321): avc: denied { mounton } for pid=6586 comm="syz-executor.1" path="/root/syzkaller-testdir304862714/syzkaller.uEKs6M/212/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.269774][ T6580] 9pnet: Could not find request transport: tcp>ort=0x0000000000000000 04:09:30 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000400)={0x0, 0x0, 0xfffffffffffffff9}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000000)="82e4249a5384cedc71a673ec3e280f08d28a831fbaeb3ada12f923") 04:09:30 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 04:09:30 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 04:09:30 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d746370063e6f72743d3078303030303030303030303030303030302c726f6f74636f6e746578743d73797374656d5f752222415238d1f952d3ad4291add65556a44cb105be5046b8d1f948a9ca3786634a818283eac897721215790c1c38948e0dc8fdd6f8f23c30c23b403615b4ca69be5deb44653dfab1"]) [ 176.298271][ T6596] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 04:09:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 04:09:30 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0xffff, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x120001, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="ba", 0x1}], 0x1) 04:09:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="c5", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:09:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x0) 04:09:30 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) [ 176.362909][ T6606] 9pnet: Could not find request transport: tcp>ort=0x0000000000000000 04:09:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="c5", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:09:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x0) 04:09:30 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056580)={0x1e3, [{}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}], 0x0, "db12d6ed60fcd2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r60 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r60, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "674f05f17ca7ff0c95c0b5aca6165efc832a776f7db21637b1da1c6054b08f20938426c4a02ce70ca3aa4f425d38f840a7749468ae2f039f397607801c3865b0f90cc83912882851403ce6f9884a586980a382ca04ad7e75d8155e4a14dba5df8c5085b4f46f8e26b4bd7160deeea0562ccfc808e658834d6e3c96715485682f6a42915d0971c94718ab9ea474978778412f078c19364de63640e4d723b82df6a302f853c96c926aed60de6216e727ed1cc904ae1950df9e3e98680909a3aaf62832c91ad40e2c500f5024f3c62d089a6af429b94f44a4f76521646c1fe974e8b7ffddfdcc3948126f1cc6b8158473cb0302f0035117405506cc9bae9235b481", "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"}) r61 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r61, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r62 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r61, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r62, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0}, {0x0}, {}, {r64, 0x0}, {0x0, 0x0}, {}, {0x0, r65}, {}, {}, {0x0, r65}, {}, {}, {0x0, r65}, {}, {r64}, {0x0, r65}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, r65}, {r64}, {}, {r63, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {r63, r65}, {r64, 0x0}, {}, {0x0, r65}, {0x0, r65}, {0x0, r65}, {r63, r65}, {}, {0x0, r65}, {r64}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r65}, {0x0, 0x0}, {r63}, {0x0, r65}, {0x0, 0x0}, {0x0, 0x0}, {r64}, {0x0, 0x0}, {}, {}, {}, {0x0, r65}, {0x0, r65}, {0x0, r65}, {0x0, r65}, {0x0, r65}, {}, {}, {}, {}, {r63}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, r65}, {}, {r64}, {r63}, {}, {r64}, {0x0}, {0x0, r65}, {}, {0x0, 0x0}, {}, {0x0, r65}, {r63}, {}, {0x0, r65}, {0x0, r65}, {r63, r65}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r63, 0x0}, {0x0, r65}, {r63}, {r64}, {}, {}, {}, {}, {0x0, r65}, {}, {0x0, r65}, {}, {0x0, r65}, {}, {}, {r64, r65}, {r63}, {r64}, {}, {r63, r65}, {r63}, {r64, r65}, {}, {r63}, {}, {}, {}, {0x0, r65}, {0x0}, {}, {r64}, {}, {0x0, r65}, {r63, r65}, {0x0, r65}, {r64, r65}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {r63}, {0x0, r65}, {r64, 0x0}, {r63}, {}, {r64, r65}, {0x0, r65}, {0x0, 0x0}, {}, {0x0, r65}, {0x0, 0x0}, {0x0, r65}, {r64}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {r63}, {}, {}, {0x0, r65}, {0x0}, {r64}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {r64, r65}, {0x0, r65}, {}, {}, {r63}, {0x0, r65}, {r64, 0x0}, {0x0, r65}, {}, {0x0}, {0x0, r65}, {}, {}, {}, {r64}, {r63}, {0x0, 0x0}, {r63}, {0x0}, {0x0, r65}, {r64, r65}, {0x0, r65}, {0x0, r65}, {0x0, r65}, {0x0}, {}, {r63}, {}, {r64}, {}, {}, {}, {0x0}, {r63}, {}, {0x0, 0x0}, {r63}, {}, {0x0, 0x0}, {0x0}, {r64}, {0x0, r65}, {r63}, {r64}, {r64}, {0x0, 0x0}, {}, {r64}, {0x0, r65}, {0x0, r65}, {r63}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, r65}, {}, {0x0, r65}, {}, {r64}, {r63, 0x0}, {0x0}, {0x0}, {r63, r65}, {}, {}, {}, {0x0, r65}, {}, {r63, r65}, {0x0, r65}, {r64}, {}, {r63}, {0x0, r65}, {r64, r65}, {r64}, {0x0, r65}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r65}, {0x0, r65}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b600)={0x7, [{r98, r143}, {r95, r75}, {0x0, r36}, {}, {}, {}, {r31}, {r116}, {r138, r15}, {0x0, r11}, {}, {0x0, r59}, {}, {0x0, r118}, {}, {r90}, {r135}, {r125, r84}, {}, {0x0, r22}, {r34}, {r33}, {r3}, {}, {}, {r46}, {}, {}, {}, {0x0, r82}, {}, {}, {0x0, r57}, {}, {0x0, r134}, {}, {r71}, {}, {r45}, {r81, r6}, {r44, r5}, {r52, r55}, {}, {}, {0x0, r132}, {0x0, r72}, {r115, r87}, {r38}, {r0}, {0x0, r50}, {}, {0x0, r26}, {0x0, r93}, {}, {r105}, {r126, r83}, {}, {r139, r88}, {}, {}, {r37}, {r128}, {}, {}, {}, {0x0, r27}, {0x0, r70}, {r29}, {}, {}, {}, {0x0, r141}, {}, {r43}, {r108}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r122, r142}, {r1}, {}, {r24}, {r4}, {}, {0x0, r74}, {}, {r109}, {r121}, {r77, r39}, {r23}, {0x0, r110}, {r17}, {}, {}, {r54}, {}, {0x0, r142}, {r127}, {r48}, {r103}, {}, {r77, r111}, {r16}, {}, {}, {r53}, {0x0, r30}, {r73, r85}, {0x0, r124}, {}, {0x0, r76}, {}, {0x0, r112}, {}, {0x0, r129}, {0x0, r96}, {}, {}, {r7, r49}, {}, {0x0, r8}, {}, {0x0, r69}, {0x0, r97}, {0x0, r83}, {}, {}, {}, {0x0, r56}, {r42, r113}, {r51}, {r73}, {}, {r18}, {}, {}, {}, {}, {}, {r66}, {}, {}, {r94}, {}, {}, {0x0, r130}, {}, {}, {r12, r40}, {}, {r91}, {r104, r100}, {}, {0x0, r19}, {r92}, {}, {}, {r10, r56}, {0x0, r137}, {}, {}, {}, {}, {}, {r41, r13}, {0x0, r2}, {}, {0x0, r70}, {0x0, r102}, {r67}, {}, {r89}, {}, {r35}, {0x0, r144}, {}, {}, {0x0, r107}, {r106}, {}, {0x0, r21}, {}, {}, {r123}, {}, {}, {r20}, {r133}, {}, {}, {}, {r25}, {}, {0x0, r137}, {0x0, r84}, {0x0, r72}, {}, {}, {0x0, r32}, {}, {}, {}, {}, {}, {}, {}, {}, {r47, r99}, {0x0, r68}, {0x0, r28}, {}, {}, {r117, r9}, {}, {r119, r83}, {r78}, {r23}, {}, {}, {0x0, r14}, {}, {r101}, {}, {}, {}, {0x0, r79}, {}, {}, {}, {}, {r58, r114}, {0x0, r114}, {}, {0x0, r11}, {0x0, r82}, {}, {0x0, r140}, {0x0, r114}, {r131}, {}, {}, {}, {}, {}, {0x0, r136}, {}, {0x0, r120}, {}, {0x0, r80}], 0x0, "11ac7384503613"}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @can, @rc={0x1f, @none}, @sco={0x1f, @none}, 0x9, 0x0, 0x0, 0x0, 0xd9, &(0x7f0000000040)='gretap0\x00', 0x7, 0xffffffffffff0000}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r145 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r145, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "674f05f17ca7ff0c95c0b5aca6165efc832a776f7db21637b1da1c6054b08f20938426c4a02ce70ca3aa4f425d38f840a7749468ae2f039f397607801c3865b0f90cc83912882851403ce6f9884a586980a382ca04ad7e75d8155e4a14dba5df8c5085b4f46f8e26b4bd7160deeea0562ccfc808e658834d6e3c96715485682f6a42915d0971c94718ab9ea474978778412f078c19364de63640e4d723b82df6a302f853c96c926aed60de6216e727ed1cc904ae1950df9e3e98680909a3aaf62832c91ad40e2c500f5024f3c62d089a6af429b94f44a4f76521646c1fe974e8b7ffddfdcc3948126f1cc6b8158473cb0302f0035117405506cc9bae9235b481", "c103f0f21bfe2112a3696a06e8e95d7941924d3d44fe9626fffbc9ae9d1f3b3c8dd92eb8b93afceb0cffa370e4bfb4e4c24ff08379680383f8b3ca2e99134342d2f0e3cee27dca1b434fa331f533d7eca57b28b23793c31d4412e8333086c82049282784244cf3e9b8d2738c4cc3090d52b8a9f02423533836542f0c9963314ed32f543be6d8f9ffd933a3be354b30ba541a171aea9d9ff3855e8ff433818926557c2a2eb1a5c07cc8722137e151761612da845c9890002ad5b75b51168d0a23545c736dcb84d3fe19bc427af06f75788a9eb8187a396a2c52f30cd9c53107b1ed1431ee3935c620fc6e2e19668c075aead08971dc6aa1954304fbbc0bde0c9dbbdad6f2a41b4feaa636eb4c092ebb29ea8dea3a55ba47fd728aa4231d0e4b0d11f42975590e26bd05f65d4c6b9965805081ca8dc236a83c14a226ab1fa76a793171244eb4b230ccf7e4233f162bbe06a2b54e4c39f0d150bb9ab0c5994539c8694c7a3548f74970c45b71e4b75bfd389efc3f5f36ff69543e6962941fd0eacdae7ea0b594cf7396966f4d6fb30df799fc0333f3755cdf791b129853b7411469ccdd43685a2783987bcfb7f975d604532b03fba007c7040a91a31700c332d72b0b8269aa1155016109c457b17de6561309acdfc0db071a44529f2472e43300d281fc67ff3126d80fa0e97a851af43894cb236217247a1a9d43b49c25bc69855a245662f35e3d4803ac2a2be9d8d4e2bbb60bb975313c8459f449e0e1743cf7d6fef9b93a49a5de3ac39f923e8d1237055c559921db7a7292dcee6b46036a76624c89c9dcfddefd60529815f1ae22986dcb49b17a55804dde5f2d99a5a869f6800a92a8694a5a0274ba25a099aff6bf7a5bb68abf33df1d496b8d0a0e03f2978a11cdb4f89932eb7653e2d94654d3b5ac1d9f02191d97536b4a609ee683f750ca8ae0d11571407822c9bf448e878e2db9e4f4907afb1e45c8ab6403e87f3ef74d7b52881fedfab0bddd052f63c4cc3f2ae3b4728dce658e38b538d1f014af3429425de8c698d507f477f55e59be14ed55ed9816529dd0195e6d30deae07a31b8e10f55214bde5f7e31064eb7e7733809735a8b3fb845f681ebb077c4277e3f73617297985f9043a9e1536c4d151eab58274b6123474b4d1302dd078576f94c324198e43d356a19a6f010b07d1d30ac56132d5fba5479f7440644e5420cfbabf5348a23b5696a46af4154a79a3d36493e10df4ccfd23915774fe5e48bea7fa04d06f842be4cd5a9c233fc9d975a86972e70bdc5b762f426fff19798df9eebe4de61d42edb6cc4e644a506e9fb41141fef27fd92c0a06429134bc7a85ddd4c05696065f29d972458e09231c48ba437c76954abab1bf1e564eef263f9a4e34ae9aeda8836a065d41fb24a802a885fe0c49312c76515e23784f23071049159ad27db9333101707a2069952e242953850bf646920c955adbc1ef89862765afb04f5e8b1a9e53c45085c071e212b9fa28cdf601e3f7e9548d14488d3e39a8a80452bd367edcb6435a4dc37219a855934ca8298e487ca6684d713fde239d30c43a5865e9b795c95ae38fa3206b90382df5b275755f02176c931afe5e3ef62ceedfcb3a91dbc72f16a302cc1b14919cd5d0deff602609a6075e40ec7811aa0fdde01fccbf71d5b958552ca2c1972f6b3b1b862b1830cfbc42361a2cc377ea13481d08c208842843776508b74b595d1334d4943bb14d911e5db8908efa972d2b4caddb078862feb34af109cda2d1ff86ee22e95bb88caa9d889eb0ad458446e82b7d4ed6d311fe8bc39e9c9a18e24c9ed0a4c88c62adc3acfd8fbfe814f9320ca9917c5972981b2b82548c7fcc8eb68b297cf07942408c2c212adfbe75a9b403cea95cf6395eccbd822a9409c0839c9266bcf1a8abcf942f531373ab30a3f8575c37683739839b90634d45544f430f1ba8f7baf09b926a904db94bad5e27e7d2af11ede98d9fd8871170cdb8139502c77dd9944dae47edfba3ca7533faeb8de80c6a940319ef69dcfda8f9afee83197ce3e8a680ff956d7b00f8c96d0710ec4f3af5dad974ba6c2552e7a10e410ef18de6acb0ead0fd50256709bd7db5a9a21cbb2fd864aa367975ecb754b3cec371a3d3b620c31364bd75e28c6109e61b5ef874ac70d078fa7a616ad603fafdb324fafa6d7b4056ac3e0991062fd0579368297390fb5f93c2d79d1e421ec90c3142ec50250812a32c49da4ad9a37ba50c2804bfd817dd21c5ab93896325036677523901daf28d23afb02ae1fa79b711d0ccb12d393aaadbddd005a9737c09d955cd4bdd682eafc94619f56b253dcedb77a9bfccf756460a3ae52fe1d379bc9071e0e2fa7c07eecc84892d1425b95bf74d3eaacbd096cbcc8afd3056f08de74da3412135b493224c9595d22a6ee8d8d28bb4deb73b4e8f37945ec75e8f9be9d898481a45ed6b503976d2d8b86de5004d373adf6db1e642c5972c66c869d5d892464678ed992f398bb4dd80d42ca4cdc479d34e84f282e035e81d16ca0f2f23a015869914fad8880048b6bd978502c772e7c66c18022f84c47ef0b66e9abd7b29b5a69dfd07cbadac24e03455afd118603a5c8f9a2c2d9075a2df94cc54a6454da5921727a933cf6acc6333323a106b87ac607db64fb1c69f213a73c97d95929a5d6f9c56f6c59d589f89cd95695c91020b6276dd5ac1a047e4719b4af8a50a5d9102d33bbc70988797660759c091ee664575af8b5773414c99420c57a92f79df93e0a566bd78429b61b95044ca9cbe8b45fa9e589eebcda6e726f9206fc3371ce2a75cd6722be922a225ab80a93df911c06af72b32d6f9ef11fee3498626f9954fffb8b802ff9589b293d0313e9cd0c41f2f52e3819d4928f590da29cedc9251def5b6372a738175a2631d0e947c37338d65c18feed44c436c6e09a5399344d56374ad18c9edff8115a457bf2b177324ccd261ccd66b76e4259accebaa62a0dcd1de3045bbef40f43217c2212d5d8d60ab9d07c39779accae52dce0935340e1eaca65aeb32900873de2acc79f94ded250286e22d5155595f2f3ca810b33269c245f8b39ce56c65cd91bebc75ed744a168696c2ab539a915e322af06b7fc4f766b87f76897ee596f0fdc42406d161404aab440ddea167531f6b6663c4c1d375145890d706864db513bfdd921e5d3e9eafc5a174532cb8362408d2077ef965ce6bf2a265733320a27e793f130903e21d46d4f9ca884fcdcb2087e3e9c0be26e9730640650776a4e9debdc7bb4811a6af1e06bcacf285baaa16d369c1ada97e54cf7ba7aaaefb3f0dc3154527768b39e17c1042e25eff0bb297ad7c6dc19504a9ba6b44bffbfc0ff72ac1a66ef990782719b0206223c89b25281248e2d15150fea2e745b1019b207af580a2c4530cfca7f5e518bf5d1ab6558663949966377477a2cc9f84e9f8fe017d3f639157e1cb93a31fd493dfc975e107ad268b111c32c1efa99dbd6bdf23045dc1655d2a7bea4ba3c63636c63b4484b72b708ea19c63fc9eba489a03a43ebff2a939fccc2152d68176ce6d31c8269499855b278ac3679c2fb198dc30c4c43fcd8b0f2cc810e8cc13e0a12ebce7746d3cc08596bd387dc1b0277960880091682cdad728b45d7db12e6ea49903f2444ad105b6e72b0c49c291c662921f1e6fdc4d3c7fea6aeba38f153a72d2dd84f42f1fc1f88fad9c84ce307bc8fbe45d9595652b7dadab5d66c8c9eabd2741994537ecbb9bcf3cd622ca060f67588d964910c78b3057764d88848b08a9d4a0d6e863e6638947fde750d20a6a9231884a1a376a2bba53c57eaa9943742e6c5a556ee227170c4f3cba81a865824f1a4ece096a141f6f48b86fa9936d8db06155e58cedea8b906e925f8a09f84a2121685743b862e2f7ea87ef8988ff259d75ec59fd9def2f5249afff8a151b7a2a6a539e2ef4265842d014fe0e7e22c5734330cb562271f87b7bab8c074e8593572baca17d646a00e48c681e79c86df5345801ef54b1d4933d9cea87d29109bf46ab1f50a85809ae97d54569aaf887323ab6bfd75493e52043fee3d0ba0e82b79fe605fe2772a85ed5029290b9cba32a46504bb128b51c49143e6cd147d9cf0a4fc49ee58324f5b376e3e1e38541d0c2bc59de474160e4314ddd01f4a258ff33b358d0e0e3ab792b8a00d237c8cde24d4cf13194fdb2e5e6987ce9c928650588342a686a4c99a4ce8606dfb5e29b5886e472e2eaf4317d5d014199096d4c7bb23fb2fc765f816e8c50e37a8f0680ef10097e3c1eacc91bf67c5e22fc662c559eaa876eeb5b7bdc52c1aa2b7b922e34f00d0934c97f36a14de353ec46c0fe28c083df2353cfb4e4d755a6f796d8ab15bbc91e66f1263590db8e8628cb1a1882b59038fd3faf475b0e8f0abe3c5e5408d82d787446e541dd65d52299ad06daaa1f0f6b7a8317211ef44c0b0ecc9cceef23e55bce7a6b64332ef5923b0f516af21c8ace51dc1a558ff471c99be982764873a353b7e22f5429ac9ba1f02ba517083355db774e248e9c641bb7c8a484b892720590ddc40f036d72ba389d5706f848ab49304ec62963dd629444d94f92f14fc2b075c3aea138543f9ec2dc027fe8aac0de72092cfbbbbdadb4778e228df9542487e088e5da45e5f7d44ecbcb6210ea824292c9575616f5d64a41dccd96aaa1830b04dcddcd8393e9a2fd64ad23f7b0840b5cd83d33945510959cc296da2d8cd921d9c4af41ba3f7445e805819fd0f536dc3175a9a9881787c61675b254193d1f2b7c92fbdc9e76ad583f0949527ace32438016a23a0c9a1f35e921a82b28a01e634036d0a689199a70f798161b2161464f91fd4bdfd66418ba5db0b5d7bf5f27758cbea58eefe9cd905b516e7b8c368e1fc3a35f3b3902c181e00b9a232d4942ea14b3cce209afe063ff8783b3066f31590b8e0436b86143744dc85622a9228ffc94e2777b45acf2a10015212961fc9f874e5a46d396ecca237fa661444fab6719bdba4a8cdfed0a8ab56c317a8d2d077d57c06c9153716ff8a7859398445e37737326c6093bfd8e52330b04329b33d5ad746e2976715119ef81b247487c7d95f7ed46cc6fb0f156512fa630e255e0cb8c1e502331af478f58c0770c018ee0ffb519502173c47f94e5e912dcdea9b8e7a69967ed77b9f1375784ba9b77866bdc3c774996d8db597e732230e1a654e824fe879306848a606f40678e70c130dc2a64b58323806fb2f39ee329cbcd5a74ef6072cb6eede9fd78d84e98afc284646306940989a1189ed7e31b8d1175ce4d59ae6497caed00fefbec72cc2451a22a558d2786fa6869e657d5af5c1ac115c6ad5e4d71fdcd0b391ebb3cea989871d59ff23f31899afd43876c13aa4b794c830042910bded92944"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r86}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r146}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r146}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000059600)={0x0, 0x0, "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", "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"}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010f00000001000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 04:09:30 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) [ 176.430044][ T6621] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 04:09:30 executing program 1: io_setup(0x1, &(0x7f0000001140)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001180)="16", 0x1}]) 04:09:30 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 04:09:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 04:09:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="c5", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:09:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x0) [ 176.493065][ C1] sd 0:0:1:0: tag#650 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 176.502857][ C1] sd 0:0:1:0: tag#650 CDB: opcode=0xe5 (vendor) [ 176.509108][ C1] sd 0:0:1:0: tag#650 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 176.518066][ C1] sd 0:0:1:0: tag#650 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 176.527145][ C1] sd 0:0:1:0: tag#650 CDB[20]: ba 04:09:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="c5", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:09:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) [ 176.548906][ T6628] loop5: detected capacity change from 0 to 264192 [ 176.553092][ T6633] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 04:09:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x0) 04:09:30 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xede0}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 04:09:30 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) [ 176.656777][ T6628] loop5: p1 < > p2 p3 p4 [ 176.663112][ T6628] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 176.689203][ T6628] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 176.729995][ C0] sd 0:0:1:0: tag#651 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 176.739773][ C0] sd 0:0:1:0: tag#651 CDB: opcode=0xe5 (vendor) [ 176.746058][ C0] sd 0:0:1:0: tag#651 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 176.750356][ T6655] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 176.750356][ T6655] The task syz-executor.0 (6655) triggered the difference, watch for misbehavior. [ 176.755011][ C0] sd 0:0:1:0: tag#651 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 176.755027][ C0] sd 0:0:1:0: tag#651 CDB[20]: ba [ 176.782853][ T6654] loop5: detected capacity change from 0 to 264192 04:09:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x4d, 0x0, 0x0) 04:09:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200)) 04:09:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 04:09:30 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 04:09:30 executing program 1: io_setup(0x1, &(0x7f0000001140)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001180)="16", 0x1}]) [ 176.830117][ T6654] loop5: p1 < > p2 p3 p4 [ 176.835051][ T6654] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 176.842862][ T6654] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 176.869274][ T6658] loop4: detected capacity change from 0 to 5408 04:09:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 04:09:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 04:09:30 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 04:09:30 executing program 1: io_setup(0x1, &(0x7f0000001140)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001180)="16", 0x1}]) 04:09:30 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) [ 177.067859][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 177.078926][ T4683] udevd[4683]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 177.090067][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 177.101525][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 177.115633][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 177.125680][ T4683] udevd[4683]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 177.126395][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 177.136456][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory 04:09:31 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xede0}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 04:09:31 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 04:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 04:09:31 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 04:09:31 executing program 3: kexec_load(0x0, 0x0, 0x0, 0x0) 04:09:31 executing program 1: io_setup(0x1, &(0x7f0000001140)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001180)="16", 0x1}]) 04:09:31 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 04:09:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0}, 0x0) 04:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 04:09:31 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 04:09:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0}, 0x0) 04:09:31 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 04:09:32 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xede0}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 04:09:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 04:09:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0}, 0x0) 04:09:32 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 04:09:32 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 04:09:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0xd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x68}}, 0x0) 04:09:32 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 04:09:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0}, 0x0) 04:09:32 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 04:09:32 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 178.341104][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:09:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0xd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x68}}, 0x0) 04:09:32 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) [ 178.418552][ T6733] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 178.438380][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:09:33 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0xede0}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 04:09:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:09:33 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 04:09:33 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 04:09:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0xd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x68}}, 0x0) 04:09:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110400000000000000001f00000004"], 0x20}}, 0x0) 04:09:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:09:33 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 04:09:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) listxattr(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 04:09:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 179.239938][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.249696][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:09:33 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 04:09:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 179.291772][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) listxattr(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 04:09:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0xd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x68}}, 0x0) 04:09:33 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 04:09:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110400000000000000001f00000004"], 0x20}}, 0x0) 04:09:33 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000300)) 04:09:33 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000200)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @loopback=0x7f000006}, @in={0x2, 0x0, @empty}, 0x7}) [ 180.128481][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.141683][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110400000000000000001f00000004"], 0x20}}, 0x0) 04:09:33 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 04:09:33 executing program 4: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xbd, 0xfffffffe, 0x17, "0d55e86617364f0e35e7e16f68b911b646968a5e642aebd26767adf1252d89c2dffc13196c9127b167bb7abc38da3a12757228b2b8d259e740211cc4c8f2e5072011813fe90869d3f16ac83e558ffc58d71b61c6ad57b1c7338f543e67389a3d3533444cf634ec87fd78a9870d884818be119b9b848619c62848a6aa6da8597563093dc30a3206879cad71c7c60a4b9d312b87135277490f1e8b2c770035ccd7114525f99f01482e2dec0ae93ef784cccbab6a89deaf7ad90536b36690"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000000)=ANY=[@ANYRES64]) 04:09:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000300)) 04:09:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) listxattr(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) [ 180.157483][ T22] audit: type=1326 audit(1635307773.949:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 04:09:34 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 04:09:34 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x1c}], 0x1}, 0x0) [ 180.216726][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.261502][ T22] audit: type=1326 audit(1635307773.979:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 [ 180.285458][ T22] audit: type=1326 audit(1635307773.979:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 [ 180.309396][ T22] audit: type=1326 audit(1635307773.979:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 [ 180.333468][ T22] audit: type=1326 audit(1635307773.979:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 04:09:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000300)) 04:09:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110400000000000000001f00000004"], 0x20}}, 0x0) [ 180.337284][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.357398][ T22] audit: type=1326 audit(1635307773.979:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 04:09:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x10000}, {0x3c}, {0x6}]}) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:34 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 04:09:34 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x795, &(0x7f00000003c0)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 04:09:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) listxattr(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) [ 180.357430][ T22] audit: type=1326 audit(1635307773.979:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 [ 180.357449][ T22] audit: type=1326 audit(1635307773.979:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 [ 180.438151][ T22] audit: type=1326 audit(1635307773.979:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x7ffc0000 04:09:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000300)) 04:09:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:09:34 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:09:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:09:34 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:09:34 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x795, &(0x7f00000003c0)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 04:09:34 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:09:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x10000}, {0x3c}, {0x6}]}) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b4b", 0x4}], 0x1) 04:09:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:09:35 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:09:35 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x795, &(0x7f00000003c0)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 04:09:35 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) [ 181.299619][ T22] kauditd_printk_skb: 18 callbacks suppressed [ 181.299660][ T22] audit: type=1326 audit(1635307775.089:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:09:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:09:35 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:35 executing program 5: r0 = syz_io_uring_setup(0x137e, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) [ 181.389036][ T22] audit: type=1326 audit(1635307775.179:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:09:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 04:09:35 executing program 5: r0 = syz_io_uring_setup(0x137e, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 04:09:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 04:09:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x10000}, {0x3c}, {0x6}]}) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:36 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:36 executing program 5: r0 = syz_io_uring_setup(0x137e, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 04:09:36 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x795, &(0x7f00000003c0)=0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200006) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 04:09:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 04:09:36 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000014c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 04:09:36 executing program 5: r0 = syz_io_uring_setup(0x137e, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) 04:09:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x80, "48268e8ebb52ca7d849d822c41a5e40c07c50a8fcebd852a47115aceb017a2021bc4ac34f1"}}]}, 0x164}}, 0x0) [ 182.257976][ T22] audit: type=1326 audit(1635307776.049:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:09:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @random="1c28d8a83cc3"}, 0x3c, {0x2, 0x0, @empty}, 'lo\x00'}) 04:09:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x80, "48268e8ebb52ca7d849d822c41a5e40c07c50a8fcebd852a47115aceb017a2021bc4ac34f1"}}]}, 0x164}}, 0x0) 04:09:36 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:09:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x10000}, {0x3c}, {0x6}]}) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x80, "48268e8ebb52ca7d849d822c41a5e40c07c50a8fcebd852a47115aceb017a2021bc4ac34f1"}}]}, 0x164}}, 0x0) 04:09:36 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 04:09:36 executing program 4: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe}) 04:09:36 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:09:36 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup3(r3, r5, 0x0) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0x78) 04:09:36 executing program 4: unshare(0x8000400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x0, 0x1}) 04:09:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x80, "48268e8ebb52ca7d849d822c41a5e40c07c50a8fcebd852a47115aceb017a2021bc4ac34f1"}}]}, 0x164}}, 0x0) 04:09:36 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 04:09:36 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 183.127007][ T22] audit: type=1326 audit(1635307776.919:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:09:37 executing program 4: unshare(0x8000400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x0, 0x1}) 04:09:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 04:09:37 executing program 1: unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}, 0x0) 04:09:37 executing program 3: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:09:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:09:37 executing program 4: unshare(0x8000400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x0, 0x1}) 04:09:37 executing program 5: setreuid(0x0, 0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x5) 04:09:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 04:09:37 executing program 5: setreuid(0x0, 0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x5) 04:09:37 executing program 1: unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}, 0x0) 04:09:37 executing program 4: unshare(0x8000400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0x0, 0x1}) 04:09:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty}, {@in=@private, 0x0, 0x3c}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 04:09:37 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f0000002400)=""/102400, 0x19000}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) 04:09:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0xb, 0x0, 0x0) 04:09:37 executing program 1: unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}, 0x0) 04:09:37 executing program 5: setreuid(0x0, 0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x5) 04:09:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty}, {@in=@private, 0x0, 0x3c}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 04:09:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:09:37 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f0000002400)=""/102400, 0x19000}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) 04:09:37 executing program 4: r0 = creat(&(0x7f0000001200)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40086607, 0xffffffffffffffff) 04:09:37 executing program 1: unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000140)={{0x0, 0xffffffffffffffff}}, 0x0) 04:09:37 executing program 5: setreuid(0x0, 0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x5) 04:09:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty}, {@in=@private, 0x0, 0x3c}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 04:09:37 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f0000002400)=""/102400, 0x19000}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) 04:09:38 executing program 4: r0 = creat(&(0x7f0000001200)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40086607, 0xffffffffffffffff) 04:09:38 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 04:09:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, 0x0, 0x0) 04:09:38 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f0000002400)=""/102400, 0x19000}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) 04:09:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@empty}, {@in=@private, 0x0, 0x3c}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 04:09:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:09:38 executing program 4: r0 = creat(&(0x7f0000001200)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40086607, 0xffffffffffffffff) 04:09:38 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 04:09:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/63, 0x3f) getdents(r0, 0x0, 0x28000000) 04:09:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, 0x0, 0x0) 04:09:38 executing program 4: r0 = creat(&(0x7f0000001200)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40086607, 0xffffffffffffffff) 04:09:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r0, &(0x7f0000002440)=""/102400, 0x19000, 0x300) 04:09:38 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 04:09:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/63, 0x3f) getdents(r0, 0x0, 0x28000000) 04:09:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, 0x0, 0x0) 04:09:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @loopback}, @phonet, @can, 0x0, 0x0, 0x0, 0xb00}) 04:09:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 04:09:38 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 04:09:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/63, 0x3f) getdents(r0, 0x0, 0x28000000) 04:09:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, 0x0, 0x0) 04:09:38 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x1, 0x0, 0x0) 04:09:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @loopback}, @phonet, @can, 0x0, 0x0, 0x0, 0xb00}) 04:09:38 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$setsig(0x11, r1, 0x0, &(0x7f0000000340)) 04:09:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='D', 0x1, 0x12e}]) 04:09:38 executing program 0: rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 04:09:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/63, 0x3f) getdents(r0, 0x0, 0x28000000) 04:09:38 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$setsig(0x11, r1, 0x0, &(0x7f0000000340)) 04:09:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @loopback}, @phonet, @can, 0x0, 0x0, 0x0, 0xb00}) 04:09:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @loopback}, @phonet, @can, 0x0, 0x0, 0x0, 0xb00}) 04:09:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 04:09:38 executing program 0: rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 04:09:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='D', 0x1, 0x12e}]) 04:09:38 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$setsig(0x11, r1, 0x0, &(0x7f0000000340)) 04:09:38 executing program 2: r0 = gettid() waitid(0x2, r0, &(0x7f0000000040), 0x4, 0x0) 04:09:38 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$setsig(0x11, r1, 0x0, &(0x7f0000000340)) 04:09:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 04:09:38 executing program 4: setresuid(0xee01, 0xee00, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 04:09:38 executing program 0: rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 04:09:38 executing program 2: r0 = gettid() waitid(0x2, r0, &(0x7f0000000040), 0x4, 0x0) 04:09:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='D', 0x1, 0x12e}]) 04:09:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 04:09:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0xcff, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0) 04:09:38 executing program 4: setresuid(0xee01, 0xee00, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 04:09:38 executing program 0: rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) 04:09:38 executing program 2: r0 = gettid() waitid(0x2, r0, &(0x7f0000000040), 0x4, 0x0) 04:09:38 executing program 4: setresuid(0xee01, 0xee00, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 04:09:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0xcff, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0) 04:09:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x541b) 04:09:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) 04:09:38 executing program 4: setresuid(0xee01, 0xee00, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 04:09:38 executing program 2: r0 = gettid() waitid(0x2, r0, &(0x7f0000000040), 0x4, 0x0) 04:09:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='D', 0x1, 0x12e}]) 04:09:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xf7ffffc5, 0x0, 0x0, 0xffff, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x7b) 04:09:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0xcff, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0) 04:09:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6280, 0x1955cc77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) dup2(r0, r1) 04:09:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0xcff, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0) 04:09:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) 04:09:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xf7ffffc5, 0x0, 0x0, 0xffff, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x7b) 04:09:38 executing program 2: creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) creat(0x0, 0x0) close(r0) 04:09:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x20000007}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 04:09:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xf7ffffc5, 0x0, 0x0, 0xffff, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x7b) 04:09:38 executing program 1: syslog(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:38 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setsig(0x15, r3, 0x0, 0x0) 04:09:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xf7ffffc5, 0x0, 0x0, 0xffff, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x7b) 04:09:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x20000007}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 04:09:38 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) 04:09:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6280, 0x1955cc77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) dup2(r0, r1) 04:09:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x20000007}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 04:09:38 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setsig(0x15, r3, 0x0, 0x0) 04:09:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) 04:09:38 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) 04:09:38 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x20000007}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 04:09:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) 04:09:38 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setsig(0x15, r3, 0x0, 0x0) 04:09:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) 04:09:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x7, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6280, 0x1955cc77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) dup2(r0, r1) 04:09:39 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x33, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setsig(0x15, r3, 0x0, 0x0) 04:09:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000000) 04:09:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x7, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x4200, 0x0, 0x3) 04:09:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x7, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x10, 0x3f0}, 0x10}], 0x1}, 0x0) 04:09:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x4200, 0x0, 0x3) 04:09:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x10, 0x3f0}, 0x10}], 0x1}, 0x0) [ 185.390500][ T7171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=7171 comm=syz-executor.3 04:09:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6280, 0x1955cc77}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) dup2(r0, r1) 04:09:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x80, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x7, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}}, 0x0) 04:09:39 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) [ 185.438390][ T7180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=7180 comm=syz-executor.3 04:09:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x4200, 0x0, 0x3) 04:09:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x10, 0x3f0}, 0x10}], 0x1}, 0x0) 04:09:39 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000840)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 04:09:39 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x7ff, 0x4f2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x0, 0x0, 0x3}, 0x20) 04:09:39 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:09:39 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:09:39 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000840)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 04:09:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x10, 0x3f0}, 0x10}], 0x1}, 0x0) 04:09:39 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x7ff, 0x4f2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x0, 0x0, 0x3}, 0x20) [ 185.563478][ T7195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=7195 comm=syz-executor.3 04:09:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x4200, 0x0, 0x3) 04:09:39 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000840)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 04:09:39 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x7ff, 0x4f2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x0, 0x0, 0x3}, 0x20) 04:09:39 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="fc00000018000708ab092500090007000a070000000000020000369321000100fb2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc000500ff036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e8077000000005a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a46ef94a505b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 04:09:39 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 04:09:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 185.656754][ T7206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=7206 comm=syz-executor.3 04:09:39 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000840)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 04:09:39 executing program 5: set_mempolicy(0x2, &(0x7f0000000000)=0x7ff, 0x4f2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x0, 0x0, 0x3}, 0x20) 04:09:39 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 04:09:39 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x30001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_setup(0xe20, &(0x7f0000000000), &(0x7f0000041000/0x4000)=nil, &(0x7f0000042000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 04:09:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x5) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 04:09:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 04:09:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 04:09:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x4, &(0x7f0000000340)={0x77359400}, 0x10) 04:09:39 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x5) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 04:09:39 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x30001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_setup(0xe20, &(0x7f0000000000), &(0x7f0000041000/0x4000)=nil, &(0x7f0000042000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 04:09:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x4, &(0x7f0000000340)={0x77359400}, 0x10) 04:09:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 04:09:39 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 04:09:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x5) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 04:09:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x4, &(0x7f0000000340)={0x77359400}, 0x10) 04:09:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x30001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_setup(0xe20, &(0x7f0000000000), &(0x7f0000041000/0x4000)=nil, &(0x7f0000042000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 04:09:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x5) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 04:09:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x4, &(0x7f0000000340)={0x77359400}, 0x10) 04:09:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 04:09:39 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)) 04:09:39 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x0, 0x4}}) 04:09:39 executing program 1: perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 04:09:39 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x30001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_setup(0xe20, &(0x7f0000000000), &(0x7f0000041000/0x4000)=nil, &(0x7f0000042000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x75cc, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 04:09:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3, 0x0, 0x0) 04:09:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 04:09:39 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x0, 0x4}}) 04:09:39 executing program 5: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0, 0x7}, &(0x7f00000000c0)="c1", 0x1, 0xfffffffffffffffc) 04:09:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x4}, {0x16}]}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:09:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)) 04:09:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') set_mempolicy(0x3, &(0x7f0000000400)=0x1f, 0x5) getdents64(r0, &(0x7f0000001cc0)=""/4079, 0xfef) 04:09:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) unshare(0x2020400) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="37e179d57780c41c9d6aed24121fdb040d"}) 04:09:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 04:09:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') set_mempolicy(0x3, &(0x7f0000000400)=0x1f, 0x5) getdents64(r0, &(0x7f0000001cc0)=""/4079, 0xfef) 04:09:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x0, 0x4}}) 04:09:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) unshare(0x2020400) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="37e179d57780c41c9d6aed24121fdb040d"}) 04:09:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)) [ 186.157545][ T22] audit: type=1326 audit(1635307779.949:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4114c6a39 code=0x0 [ 186.180996][ T22] audit: type=1400 audit(1635307779.949:354): avc: denied { write } for pid=7291 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 04:09:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='$\x00', 0x0) 04:09:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) unshare(0x2020400) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="37e179d57780c41c9d6aed24121fdb040d"}) 04:09:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x0, 0x4}}) [ 186.279146][ T22] audit: type=1400 audit(1635307780.069:355): avc: denied { open } for pid=7310 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 186.298898][ T22] audit: type=1400 audit(1635307780.069:356): avc: denied { kernel } for pid=7310 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 04:09:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x4}, {0x16}]}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:09:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)) 04:09:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') set_mempolicy(0x3, &(0x7f0000000400)=0x1f, 0x5) getdents64(r0, &(0x7f0000001cc0)=""/4079, 0xfef) 04:09:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) unshare(0x2020400) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="37e179d57780c41c9d6aed24121fdb040d"}) 04:09:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 04:09:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='$\x00', 0x0) [ 186.980649][ T22] audit: type=1326 audit(1635307780.779:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4114c6a39 code=0x0 04:09:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') set_mempolicy(0x3, &(0x7f0000000400)=0x1f, 0x5) getdents64(r0, &(0x7f0000001cc0)=""/4079, 0xfef) 04:09:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='$\x00', 0x0) [ 187.059938][ T22] audit: type=1326 audit(1635307780.859:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4114c6a39 code=0x0 04:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000000)={0x24, 0x76, 0x11b, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0xa, 0x5, 0x0, 0x0, @str='+!&-#\x00'}]}]}, 0x24}], 0x1}, 0x0) 04:09:40 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:09:40 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x99, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x16}]}) 04:09:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='$\x00', 0x0) [ 187.141526][ T22] audit: type=1400 audit(1635307780.939:359): avc: denied { getopt } for pid=7335 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.142269][ T7338] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 187.203328][ T22] audit: type=1326 audit(1635307780.989:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x0 04:09:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x4}, {0x16}]}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:09:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chdir(&(0x7f0000000040)='./file0\x00') 04:09:41 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:09:41 executing program 2: io_setup(0xfff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 04:09:41 executing program 5: r0 = getpgrp(0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffff801, 0x2) process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/119, 0x87}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x8, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000007c0)=""/235, 0xfffffec5}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/74, 0x4a}], 0x6, 0x0) 04:09:41 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x99, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x16}]}) [ 187.902064][ T22] audit: type=1326 audit(1635307781.699:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4114c6a39 code=0x0 04:09:41 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:09:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chdir(&(0x7f0000000040)='./file0\x00') [ 187.929644][ T22] audit: type=1326 audit(1635307781.719:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x0 04:09:41 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x99, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x16}]}) 04:09:41 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:09:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chdir(&(0x7f0000000040)='./file0\x00') 04:09:41 executing program 2: io_setup(0xfff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 188.024108][ T22] audit: type=1326 audit(1635307781.819:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x0 04:09:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x4}, {0x16}]}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:09:42 executing program 0: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) 04:09:42 executing program 3: set_mempolicy(0x2, &(0x7f0000000080)=0x99, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x16}]}) 04:09:42 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chdir(&(0x7f0000000040)='./file0\x00') 04:09:42 executing program 5: r0 = getpgrp(0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffff801, 0x2) process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/119, 0x87}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x8, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000007c0)=""/235, 0xfffffec5}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/74, 0x4a}], 0x6, 0x0) 04:09:42 executing program 2: io_setup(0xfff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 04:09:42 executing program 0: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) [ 188.753132][ T22] audit: type=1326 audit(1635307782.549:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4114c6a39 code=0x0 04:09:42 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x3, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 04:09:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b3c, 0x0) 04:09:42 executing program 0: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) [ 188.803372][ T22] audit: type=1326 audit(1635307782.589:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18f1fe4a39 code=0x0 04:09:42 executing program 0: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) 04:09:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b3c, 0x0) 04:09:43 executing program 5: r0 = getpgrp(0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffff801, 0x2) process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/119, 0x87}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x8, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000007c0)=""/235, 0xfffffec5}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/74, 0x4a}], 0x6, 0x0) 04:09:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x3, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 04:09:43 executing program 2: io_setup(0xfff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 04:09:43 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}, 0x22}]}}) 04:09:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b3c, 0x0) 04:09:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:09:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:09:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b3c, 0x0) 04:09:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x3, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 04:09:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:09:43 executing program 3: capset(&(0x7f0000001340)={0x19980330}, &(0x7f0000001380)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 04:09:43 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xb1, 0xffffffffffffffff, 0x10000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800002, 0x12, r1, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) [ 189.631156][ T7405] 9pnet: p9_fd_create_tcp (7405): problem connecting socket to 127.0.0.1 [ 189.655699][ T7413] 9pnet: p9_fd_create_tcp (7413): problem connecting socket to 127.0.0.1 [ 189.722475][ T22] audit: type=1400 audit(1635307783.519:366): avc: denied { map } for pid=7420 comm="syz-executor.2" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 189.740717][ T7423] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 04:09:43 executing program 5: r0 = getpgrp(0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffff801, 0x2) process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/119, 0x87}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x8, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000007c0)=""/235, 0xfffffec5}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/74, 0x4a}], 0x6, 0x0) 04:09:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:09:43 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x3, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000040)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 04:09:43 executing program 0: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x80040, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x200001ee) 04:09:43 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xb1, 0xffffffffffffffff, 0x10000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800002, 0x12, r1, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) 04:09:43 executing program 3: capset(&(0x7f0000001340)={0x19980330}, &(0x7f0000001380)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 04:09:43 executing program 3: capset(&(0x7f0000001340)={0x19980330}, &(0x7f0000001380)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 04:09:43 executing program 0: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x80040, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x200001ee) 04:09:43 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xb701, 0x0) 04:09:43 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xb1, 0xffffffffffffffff, 0x10000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800002, 0x12, r1, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) 04:09:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) 04:09:43 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xb1, 0xffffffffffffffff, 0x10000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800002, 0x12, r1, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) 04:09:43 executing program 3: capset(&(0x7f0000001340)={0x19980330}, &(0x7f0000001380)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 04:09:43 executing program 0: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x80040, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x200001ee) 04:09:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x14}, {0x6}]}, 0x10) write(r0, &(0x7f0000000040)='UOh\"', 0x4) 04:09:43 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xb701, 0x0) 04:09:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) 04:09:43 executing program 5: r0 = syz_io_uring_setup(0x4fd6, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3) 04:09:43 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xb701, 0x0) 04:09:43 executing program 0: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x80040, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x200001ee) 04:09:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x14}, {0x6}]}, 0x10) write(r0, &(0x7f0000000040)='UOh\"', 0x4) 04:09:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf00000000000000", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 04:09:43 executing program 5: r0 = syz_io_uring_setup(0x4fd6, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3) 04:09:43 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xb701, 0x0) 04:09:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) 04:09:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x14}, {0x6}]}, 0x10) write(r0, &(0x7f0000000040)='UOh\"', 0x4) 04:09:43 executing program 3: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000100)=""/102370, 0x18fe2, 0x0) 04:09:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x40}, 0x1c) listen(r0, 0x0) 04:09:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus/file0\x00', 0x80, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000c00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dcc0)={0x4, [{r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {r5}, {}, {}, {r5, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {r6, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {r6}, {}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r5}], 0xd2, "ebc55744c3433f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001c00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xe0}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x6c}]) creat(&(0x7f0000000000)='./bus\x00', 0xa0) 04:09:43 executing program 5: r0 = syz_io_uring_setup(0x4fd6, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3) 04:09:43 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) 04:09:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x40}, 0x1c) listen(r0, 0x0) 04:09:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x14}, {0x6}]}, 0x10) write(r0, &(0x7f0000000040)='UOh\"', 0x4) 04:09:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x4a060480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 04:09:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x40}, 0x1c) listen(r0, 0x0) 04:09:44 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) tkill(r0, 0x7) [ 190.217031][ C0] sd 0:0:1:0: tag#696 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 190.226825][ C0] sd 0:0:1:0: tag#696 CDB: opcode=0xe5 (vendor) [ 190.233101][ C0] sd 0:0:1:0: tag#696 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 190.242198][ C0] sd 0:0:1:0: tag#696 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 190.251157][ C0] sd 0:0:1:0: tag#696 CDB[20]: ba 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 5: r0 = syz_io_uring_setup(0x4fd6, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3) 04:09:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x40}, 0x1c) listen(r0, 0x0) 04:09:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x4a060480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 04:09:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus/file0\x00', 0x80, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000c00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dcc0)={0x4, [{r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {r5}, {}, {}, {r5, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {r6, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {r6}, {}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r5}], 0xd2, "ebc55744c3433f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001c00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xe0}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x6c}]) creat(&(0x7f0000000000)='./bus\x00', 0xa0) 04:09:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) ioprio_set$uid(0x3, 0x0, 0x0) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x4a060480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) [ 190.470911][ C0] sd 0:0:1:0: tag#697 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 190.480776][ C0] sd 0:0:1:0: tag#697 CDB: opcode=0xe5 (vendor) [ 190.487017][ C0] sd 0:0:1:0: tag#697 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 190.495997][ C0] sd 0:0:1:0: tag#697 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 190.504958][ C0] sd 0:0:1:0: tag#697 CDB[20]: ba 04:09:44 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) tkill(r0, 0x7) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 04:09:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) ioprio_set$uid(0x3, 0x0, 0x0) 04:09:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x4a060480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus/file0\x00', 0x80, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000c00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dcc0)={0x4, [{r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {r5}, {}, {}, {r5, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {r6, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {r6}, {}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r5}], 0xd2, "ebc55744c3433f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001c00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xe0}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x6c}]) creat(&(0x7f0000000000)='./bus\x00', 0xa0) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 04:09:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) ioprio_set$uid(0x3, 0x0, 0x0) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) ioprio_set$uid(0x3, 0x0, 0x0) 04:09:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c4"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 190.761637][ C0] sd 0:0:1:0: tag#642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 190.771403][ C0] sd 0:0:1:0: tag#642 CDB: opcode=0xe5 (vendor) [ 190.777640][ C0] sd 0:0:1:0: tag#642 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 190.786605][ C0] sd 0:0:1:0: tag#642 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 190.795573][ C0] sd 0:0:1:0: tag#642 CDB[20]: ba 04:09:44 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) tkill(r0, 0x7) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x64}, {0x20}, {0x6, 0x0, 0x0, 0x7fff8000}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3fde}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = open(0x0, 0x110cdc, 0x125) fspick(r3, &(0x7f0000000500)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000580)="fa190d4d846dfbcb15411ba4bbdc56d9dd77007afd167e04ef896fba5800115a30101eb970303ffa1a9553c3005488c8d92e7952edc5462efce8571530d350e31cb751c3640091e31a0724913860236fca32ff9f1ae3ed7c24839458adfc0069af52bb3817dd5c2f21dd37ac27d77fe0d9de5a"}}) mq_timedsend(r4, &(0x7f00000000c0)="8cacf8bc84b9255b0ed6e237f17dc911795a22239e3bf2c6bdc7663af4eed1dd10b0f0c70907425a9e5fb57fbc4dfcd46a811ccd8dee9f01801fffd0e4", 0x3d, 0x7, 0x0) 04:09:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c4"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 04:09:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus/file0\x00', 0x80, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000c00)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dcc0)={0x4, [{r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {r5}, {}, {}, {r5, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {r6, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {r6}, {}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r5}], 0xd2, "ebc55744c3433f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001c00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xe0}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x6c}]) creat(&(0x7f0000000000)='./bus\x00', 0xa0) 04:09:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x64}, {0x20}, {0x6, 0x0, 0x0, 0x7fff8000}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x64}, {0x20}, {0x6, 0x0, 0x0, 0x7fff8000}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) [ 191.007876][ C1] sd 0:0:1:0: tag#667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 191.017679][ C1] sd 0:0:1:0: tag#667 CDB: opcode=0xe5 (vendor) [ 191.023952][ C1] sd 0:0:1:0: tag#667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 191.032917][ C1] sd 0:0:1:0: tag#667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 191.041875][ C1] sd 0:0:1:0: tag#667 CDB[20]: ba 04:09:44 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) tkill(r0, 0x7) 04:09:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c4"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 04:09:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x64}, {0x20}, {0x6, 0x0, 0x0, 0x7fff8000}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 04:09:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:09:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x525, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x2c, 0xe, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0xe, "f47dbabca5d3989a58e98dfa3bc6798e95bc7ba888cc03e5c79b00c4c96280567eb41af5"}]}]}, 0x40}}, 0x0) 04:09:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x2}]}, 0x18}}, 0x0) 04:09:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}}, 0x0) 04:09:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x22, 0x0, &(0x7f0000000040)) 04:09:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c4"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 04:09:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x2}]}, 0x18}}, 0x0) 04:09:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}}, 0x0) 04:09:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x2}]}, 0x18}}, 0x0) 04:09:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x5) 04:09:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x525, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x2c, 0xe, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0xe, "f47dbabca5d3989a58e98dfa3bc6798e95bc7ba888cc03e5c79b00c4c96280567eb41af5"}]}]}, 0x40}}, 0x0) 04:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x40}}, 0x0) 04:09:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}}, 0x0) 04:09:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80089203, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0xffffffff80000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040080) 04:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x40}}, 0x0) 04:09:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x525, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x2c, 0xe, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0xe, "f47dbabca5d3989a58e98dfa3bc6798e95bc7ba888cc03e5c79b00c4c96280567eb41af5"}]}]}, 0x40}}, 0x0) 04:09:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@nested={0x2}]}, 0x18}}, 0x0) 04:09:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}}, 0x0) 04:09:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x5) 04:09:45 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 04:09:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x525, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x2c, 0xe, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0xe, "f47dbabca5d3989a58e98dfa3bc6798e95bc7ba888cc03e5c79b00c4c96280567eb41af5"}]}]}, 0x40}}, 0x0) 04:09:45 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close_range(r0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) finit_module(r0, 0x0, 0x0) 04:09:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x5) 04:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x40}}, 0x0) 04:09:45 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 04:09:45 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close_range(r0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) finit_module(r0, 0x0, 0x0) 04:09:45 executing program 2: select(0x27, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0) 04:09:45 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 04:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x40}}, 0x0) 04:09:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x70]}}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@polexpire={0xc0, 0x58, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x70, &(0x7f0000001600)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) 04:09:45 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 04:09:45 executing program 2: select(0x27, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0) 04:09:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x5) 04:09:45 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close_range(r0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) finit_module(r0, 0x0, 0x0) 04:09:45 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 04:09:45 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close_range(r0, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) finit_module(r0, 0x0, 0x0) 04:09:45 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 04:09:45 executing program 2: select(0x27, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0) [ 191.662071][ T7678] tmpfs: Cannot retroactively limit size [ 191.688523][ T7685] tmpfs: Cannot retroactively limit size 04:09:45 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 04:09:45 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000002c0)="30809f06", 0x4, r0) 04:09:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x70]}}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@polexpire={0xc0, 0x58, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x70, &(0x7f0000001600)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) 04:09:45 executing program 1: syz_io_uring_setup(0x63e3, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x4953, &(0x7f0000000300)={0x0, 0x50c0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 04:09:45 executing program 5: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = io_uring_setup(0x65a4, &(0x7f0000000080)={0x0, 0xfdc3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 04:09:45 executing program 2: select(0x27, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0) 04:09:45 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 04:09:45 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000002c0)="30809f06", 0x4, r0) 04:09:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x70]}}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@polexpire={0xc0, 0x58, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x70, &(0x7f0000001600)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) 04:09:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 191.805830][ T7702] tmpfs: Cannot retroactively limit size 04:09:45 executing program 5: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = io_uring_setup(0x65a4, &(0x7f0000000080)={0x0, 0xfdc3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 04:09:45 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 04:09:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6}, 0x1c) 04:09:45 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000002c0)="30809f06", 0x4, r0) 04:09:45 executing program 5: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = io_uring_setup(0x65a4, &(0x7f0000000080)={0x0, 0xfdc3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 04:09:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6}, 0x1c) 04:09:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x70]}}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@polexpire={0xc0, 0x58, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x70, &(0x7f0000001600)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) [ 191.897896][ T7720] tmpfs: Cannot retroactively limit size 04:09:45 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000002c0)="30809f06", 0x4, r0) 04:09:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/config', 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x20000}, 0x20) [ 191.960414][ T7733] tmpfs: Cannot retroactively limit size [ 191.991586][ T22] kauditd_printk_skb: 5 callbacks suppressed [ 191.991613][ T22] audit: type=1400 audit(1635307785.789:372): avc: denied { read } for pid=7734 comm="syz-executor.3" name="/" dev="configfs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.020063][ T22] audit: type=1400 audit(1635307785.789:373): avc: denied { open } for pid=7734 comm="syz-executor.3" path="/sys/kernel/config" dev="configfs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 04:09:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6}, 0x1c) [ 192.044063][ T22] audit: type=1400 audit(1635307785.789:374): avc: denied { search } for pid=7734 comm="syz-executor.3" name="/" dev="configfs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 04:09:46 executing program 5: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = io_uring_setup(0x65a4, &(0x7f0000000080)={0x0, 0xfdc3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) 04:09:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f083ffe15b282a380930a03000248a84302916d0200390009003500ff6c0200000005001600fe80ffff070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 04:09:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6}, 0x1c) 04:09:46 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0) 04:09:46 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:46 executing program 0: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:46 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f083ffe15b282a380930a03000248a84302916d0200390009003500ff6c0200000005001600fe80ffff070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 04:09:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:46 executing program 0: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:46 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0) 04:09:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f083ffe15b282a380930a03000248a84302916d0200390009003500ff6c0200000005001600fe80ffff070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 04:09:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:46 executing program 0: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:46 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0) 04:09:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 04:09:47 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:47 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f083ffe15b282a380930a03000248a84302916d0200390009003500ff6c0200000005001600fe80ffff070b566881b18432009b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 04:09:47 executing program 5: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:47 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 04:09:47 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x40040, 0x0) 04:09:47 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000003c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:09:47 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000003c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:09:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0xf, &(0x7f00000001c0), 0x20) 04:09:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d90100", 0x6, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:09:47 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000003c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:09:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0xf, &(0x7f00000001c0), 0x20) [ 193.837285][ T7806] loop4: detected capacity change from 0 to 264192 [ 193.900840][ T7806] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.918118][ T7806] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 193.957264][ T7806] EXT4-fs warning (device loop4): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 193.971400][ T7806] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 194.009039][ T7806] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 17 [ 194.040972][ T7806] ext4_test_bit(bit=16, block=18) = 0 [ 194.046379][ T7806] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:09:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:48 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003a40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000003c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:09:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0xf, &(0x7f00000001c0), 0x20) 04:09:48 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = accept$unix(r1, &(0x7f0000001180), &(0x7f0000000080)=0x6e) connect$unix(r3, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000000)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@can={0x1d, r4}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYRES16=r5], 0xd00}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)="20eb58669cfe116cdd01a944d406060b49e9f2f1a62ffa8eb6f8348c8da9701ed14e19211138551b0d06421e5fcab696c6d128764eaacd0db76c3c2efd4cd42c8a248a2df05afc27f49f14f0366edd1b7f2036840af96037089e89ee08b71df6e10249df94ceb2ac1d85a6c1a6d8378f84bdb74ad0fc02b622ed592fd5fc25c8fe5a48f9098c95e182", 0x89}, {&(0x7f0000002940)="381d09d484471cd212628b714c8b262b9e2349dc9a267f5e3fa7052888f1dd91d6f2255c8cd7849535dbf7bb77de7a2cf8f3b0a5f30291ea363c4e58e6", 0x3d}], 0x2}}], 0x2, 0x4880) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d90100", 0x6, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:09:48 executing program 5: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:48 executing program 3: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0xf, &(0x7f00000001c0), 0x20) 04:09:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 194.643084][ T7830] loop4: detected capacity change from 0 to 264192 [ 194.682181][ T7830] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.688730][ T7830] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 194.709901][ T7830] EXT4-fs warning (device loop4): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 194.724018][ T7830] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 194.731255][ T7830] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 17 04:09:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:09:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 194.741820][ T7830] ext4_test_bit(bit=16, block=18) = 0 [ 194.747276][ T7830] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:09:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d90100", 0x6, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) [ 194.839749][ T7848] loop4: detected capacity change from 0 to 264192 [ 194.870457][ T7848] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.876993][ T7848] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 194.902708][ T7848] EXT4-fs warning (device loop4): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 194.916735][ T7848] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 194.948713][ T7848] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 17 [ 194.969763][ T7848] ext4_test_bit(bit=16, block=18) = 0 [ 194.975198][ T7848] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:09:49 executing program 3: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:09:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d90100", 0x6, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) [ 195.461351][ T7856] loop4: detected capacity change from 0 to 264192 [ 195.486995][ T7856] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.493577][ T7856] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 195.529937][ T7856] EXT4-fs warning (device loop4): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 195.543955][ T7856] EXT4-fs (loop4): Cannot turn on quotas: error -117 04:09:49 executing program 0: r0 = eventfd2(0x0, 0x0) eventfd(0x0) io_setup(0xd1a0, &(0x7f0000000000)=0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 04:09:49 executing program 5: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:49 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) fstat(r3, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ea80)) syz_open_dev$sg(&(0x7f0000000140), 0xff, 0x40c580) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005ec80)={0x0, 0x0, "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", "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"}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 195.572484][ T7856] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 17 [ 195.620470][ T22] audit: type=1400 audit(1635307789.419:375): avc: denied { write } for pid=7866 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 195.620982][ C0] sd 0:0:1:0: tag#689 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 195.649776][ C0] sd 0:0:1:0: tag#689 CDB: opcode=0xe5 (vendor) [ 195.656059][ C0] sd 0:0:1:0: tag#689 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.664997][ C0] sd 0:0:1:0: tag#689 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 195.670077][ T7856] ext4_test_bit(bit=16, block=18) = 0 [ 195.673943][ C0] sd 0:0:1:0: tag#689 CDB[20]: ba [ 195.679284][ T7856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.695432][ T22] audit: type=1400 audit(1635307789.479:376): avc: denied { name_bind } for pid=7865 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 195.708369][ C0] sd 0:0:1:0: tag#690 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 195.727032][ C0] sd 0:0:1:0: tag#690 CDB: opcode=0xe5 (vendor) [ 195.733284][ C0] sd 0:0:1:0: tag#690 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.742243][ C0] sd 0:0:1:0: tag#690 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 195.751287][ C0] sd 0:0:1:0: tag#690 CDB[20]: ba 04:09:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_io_uring_setup(0x7506, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x6374, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) epoll_wait(r1, &(0x7f00000015c0)=[{}], 0x1, 0x0) [ 195.768737][ C1] sd 0:0:1:0: tag#697 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 195.778517][ C1] sd 0:0:1:0: tag#697 CDB: opcode=0xe5 (vendor) [ 195.784964][ C1] sd 0:0:1:0: tag#697 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.793915][ C1] sd 0:0:1:0: tag#697 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 195.802889][ C1] sd 0:0:1:0: tag#697 CDB[20]: ba 04:09:49 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:49 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 195.911373][ C1] sd 0:0:1:0: tag#640 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 195.921146][ C1] sd 0:0:1:0: tag#640 CDB: opcode=0xe5 (vendor) [ 195.927428][ C1] sd 0:0:1:0: tag#640 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.936391][ C1] sd 0:0:1:0: tag#640 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 195.945376][ C1] sd 0:0:1:0: tag#640 CDB[20]: ba 04:09:49 executing program 3: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) 04:09:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_io_uring_setup(0x7506, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x6374, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) epoll_wait(r1, &(0x7f00000015c0)=[{}], 0x1, 0x0) [ 195.974647][ C0] sd 0:0:1:0: tag#643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 195.984414][ C0] sd 0:0:1:0: tag#643 CDB: opcode=0xe5 (vendor) [ 195.990665][ C0] sd 0:0:1:0: tag#643 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.999595][ C0] sd 0:0:1:0: tag#643 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 196.008564][ C0] sd 0:0:1:0: tag#643 CDB[20]: ba 04:09:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_io_uring_setup(0x7506, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x6374, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) epoll_wait(r1, &(0x7f00000015c0)=[{}], 0x1, 0x0) 04:09:49 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:49 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:49 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_io_uring_setup(0x7506, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x6374, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) epoll_wait(r1, &(0x7f00000015c0)=[{}], 0x1, 0x0) [ 196.102408][ C0] sd 0:0:1:0: tag#654 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 196.112297][ C0] sd 0:0:1:0: tag#654 CDB: opcode=0xe5 (vendor) [ 196.118535][ C0] sd 0:0:1:0: tag#654 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 196.127540][ C0] sd 0:0:1:0: tag#654 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 196.136573][ C0] sd 0:0:1:0: tag#654 CDB[20]: ba 04:09:49 executing program 5: mlockall(0x3) mlockall(0x0) setuid(0xee01) syz_io_uring_setup(0x2de7, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) [ 196.149227][ C1] sd 0:0:1:0: tag#656 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 196.159008][ C1] sd 0:0:1:0: tag#656 CDB: opcode=0xe5 (vendor) [ 196.165320][ C1] sd 0:0:1:0: tag#656 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 196.174266][ C1] sd 0:0:1:0: tag#656 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 196.183240][ C1] sd 0:0:1:0: tag#656 CDB[20]: ba 04:09:50 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa000001d}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) [ 196.277441][ T22] audit: type=1326 audit(1635307790.069:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:09:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) fstat(r3, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ea80)) syz_open_dev$sg(&(0x7f0000000140), 0xff, 0x40c580) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005ec80)={0x0, 0x0, "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", "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"}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:09:50 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 04:09:50 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r6}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {r5, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {r8, r6}, {r4}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r7}, {0x0, r6}, {}, {0x0, r6}, {0x0}, {}, {r5}, {0x0, r6}, {}, {r5, r6}, {}, {}, {r4}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x0, "2156816c73038c"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r14}, {r13}, {r13}, {r13}, {}, {}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {r13}, {r12, r14}, {}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {}, {r12}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r13}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {0x0}, {0x0, r14}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {r13}, {}, {}, {}, {}, {}, {r12, r14}, {r13, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {r12, r14}, {r13}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {}, {r16, r14}, {r12}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {0x0, r15}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r13, r14}, {}, {}, {r12}, {}, {}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r13}, {}, {}, {r13}, {0x0, r14}, {}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {}, {}, {r13}, {r12, r14}, {}, {}, {}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {}, {}, {}, {r12, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054940)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "79ec5fe350605e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055940)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r14}, {r18}], 0x0, "7ed18e63313e82"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000552c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "26d1a83193c011"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="08569bf2060000000034cb074ec77fc03938cd68ee39b9ea927586e440500b8abcaf982d027b0e2e76ab6b7b284b6df6b3472f476f00fb07417d3cff8693b2758305c72cf74d25ffd4f696f392f9"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:09:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 196.520720][ C1] sd 0:0:1:0: tag#663 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 196.530616][ C1] sd 0:0:1:0: tag#663 CDB: opcode=0xe5 (vendor) [ 196.536835][ C1] sd 0:0:1:0: tag#663 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 196.545756][ C1] sd 0:0:1:0: tag#663 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 196.554686][ C1] sd 0:0:1:0: tag#663 CDB[20]: ba [ 196.600663][ C1] sd 0:0:1:0: tag#665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 196.608417][ C0] sd 0:0:1:0: tag#666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 196.610437][ C1] sd 0:0:1:0: tag#665 CDB: opcode=0xe5 (vendor) [ 196.610454][ C1] sd 0:0:1:0: tag#665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 196.620170][ C0] sd 0:0:1:0: tag#666 CDB: opcode=0xe5 (vendor) [ 196.626396][ C1] sd 0:0:1:0: tag#665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 04:09:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 04:09:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:09:50 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) [ 196.635337][ C0] sd 0:0:1:0: tag#666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 196.641551][ C1] sd 0:0:1:0: tag#665 CDB[20]: ba [ 196.650478][ C0] sd 0:0:1:0: tag#666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 196.673394][ C0] sd 0:0:1:0: tag#666 CDB[20]: ba 04:09:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000100)) 04:09:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:09:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 04:09:50 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa000001d}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) [ 197.111931][ T22] audit: type=1326 audit(1635307790.909:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 [ 197.153563][ T22] audit: type=1326 audit(1635307790.949:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:09:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:09:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000100)) 04:09:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 04:09:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) fstat(r3, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ea80)) syz_open_dev$sg(&(0x7f0000000140), 0xff, 0x40c580) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005ec80)={0x0, 0x0, "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", "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"}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:09:51 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 04:09:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000420007031dfffd946f610500070000040000000077001000421ba3a204007f7e", 0x24}], 0x1}, 0x0) 04:09:51 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) readahead(r0, 0x0, 0xfffffffffffffffa) 04:09:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000100)) 04:09:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000420007031dfffd946f610500070000040000000077001000421ba3a204007f7e", 0x24}], 0x1}, 0x0) 04:09:51 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) readahead(r0, 0x0, 0xfffffffffffffffa) 04:09:51 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 04:09:51 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa000001d}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 04:09:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000100)) [ 198.008711][ T22] audit: type=1326 audit(1635307791.799:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:09:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) fstat(r3, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ea80)) syz_open_dev$sg(&(0x7f0000000140), 0xff, 0x40c580) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005ec80)={0x0, 0x0, "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", "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"}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:09:52 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) readahead(r0, 0x0, 0xfffffffffffffffa) 04:09:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000420007031dfffd946f610500070000040000000077001000421ba3a204007f7e", 0x24}], 0x1}, 0x0) 04:09:52 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 04:09:52 executing program 2: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write$nbd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1c862a6c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x700, [], '\x00', 0x11}, &(0x7f0000000140)=0x54) preadv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f00000003c0)=""/76, 0x4c}], 0x3, 0x0, 0x99) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:09:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000420007031dfffd946f610500070000040000000077001000421ba3a204007f7e", 0x24}], 0x1}, 0x0) 04:09:52 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1c1042, 0x0) readahead(r0, 0x0, 0xfffffffffffffffa) 04:09:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000009c0)="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", 0xfc) 04:09:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @time}) 04:09:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x3, &(0x7f00000000c0)={0x1d, 0x0, 0x8}) 04:09:52 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa000001d}) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0) 04:09:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @time}) [ 198.861495][ T22] audit: type=1326 audit(1635307792.659:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:09:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x27) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000000)) 04:09:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x3, &(0x7f00000000c0)={0x1d, 0x0, 0x8}) 04:09:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 04:09:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @time}) 04:09:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}}], 0x2, 0x0) 04:09:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 04:09:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x3, &(0x7f00000000c0)={0x1d, 0x0, 0x8}) 04:09:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}}], 0x2, 0x0) 04:09:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x27) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000000)) 04:09:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @time}) 04:09:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x3, &(0x7f00000000c0)={0x1d, 0x0, 0x8}) 04:09:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 04:09:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}}], 0x2, 0x0) 04:09:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x27) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000000)) 04:09:53 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) fcntl$setstatus(r0, 0x4, 0x4000) r3 = open(&(0x7f0000000980)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000340)="03", 0x80019c}]) 04:09:53 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) tkill(r0, 0x7) 04:09:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}}], 0x2, 0x0) 04:09:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x27) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000000)) 04:09:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x600480, 0x0) fchmod(r0, 0x0) 04:09:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 04:09:53 executing program 1: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 04:09:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x600480, 0x0) fchmod(r0, 0x0) 04:09:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 04:09:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5428, 0x0) 04:09:53 executing program 1: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 04:09:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x600480, 0x0) fchmod(r0, 0x0) 04:09:53 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) fcntl$setstatus(r0, 0x4, 0x4000) r3 = open(&(0x7f0000000980)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000340)="03", 0x80019c}]) 04:09:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 04:09:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x600480, 0x0) fchmod(r0, 0x0) 04:09:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5428, 0x0) 04:09:53 executing program 1: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 04:09:53 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) tkill(r0, 0x7) 04:09:53 executing program 1: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffd, 0x21, 0x0, &(0x7f0000000000), 0x8) 04:09:53 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 04:09:53 executing program 5: clock_gettime(0x0, &(0x7f00000003c0)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="ae885b10240b0000010200002052caf9000099f0f60e00800000901a4aced6f7fefffffffffff5d5962cc573f3fc", 0x2e}], 0x10000000000002fd) 04:09:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5428, 0x0) 04:09:53 executing program 1: r0 = syz_io_uring_setup(0x534, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5428, 0x0) [ 200.073243][ T22] audit: type=1400 audit(1635307793.869:382): avc: denied { append } for pid=8075 comm="syz-executor.5" name="sg0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 04:09:54 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) fcntl$setstatus(r0, 0x4, 0x4000) r3 = open(&(0x7f0000000980)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000340)="03", 0x80019c}]) 04:09:54 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 04:09:54 executing program 5: clock_gettime(0x0, &(0x7f00000003c0)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="ae885b10240b0000010200002052caf9000099f0f60e00800000901a4aced6f7fefffffffffff5d5962cc573f3fc", 0x2e}], 0x10000000000002fd) 04:09:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 04:09:54 executing program 1: r0 = syz_io_uring_setup(0x534, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:54 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) tkill(r0, 0x7) 04:09:54 executing program 5: clock_gettime(0x0, &(0x7f00000003c0)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="ae885b10240b0000010200002052caf9000099f0f60e00800000901a4aced6f7fefffffffffff5d5962cc573f3fc", 0x2e}], 0x10000000000002fd) 04:09:54 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 04:09:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 04:09:54 executing program 1: r0 = syz_io_uring_setup(0x534, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:54 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 04:09:54 executing program 1: r0 = syz_io_uring_setup(0x534, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0xfffffff9}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:54 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) fcntl$setstatus(r0, 0x4, 0x4000) r3 = open(&(0x7f0000000980)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000001) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000340)="03", 0x80019c}]) 04:09:54 executing program 5: clock_gettime(0x0, &(0x7f00000003c0)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="ae885b10240b0000010200002052caf9000099f0f60e00800000901a4aced6f7fefffffffffff5d5962cc573f3fc", 0x2e}], 0x10000000000002fd) 04:09:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 04:09:54 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 04:09:54 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:54 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)) tkill(r0, 0x7) 04:09:54 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x18, &(0x7f0000000040)=0xbaa) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) lseek(r1, 0x0, 0x3) creat(&(0x7f00000020c0)='./bus\x00', 0x0) 04:09:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 04:09:54 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 04:09:54 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:54 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:54 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/103, 0x67}], 0x2, 0x0, 0x0) 04:09:54 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x18, &(0x7f0000000040)=0xbaa) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) lseek(r1, 0x0, 0x3) creat(&(0x7f00000020c0)='./bus\x00', 0x0) 04:09:54 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/103, 0x67}], 0x2, 0x0, 0x0) 04:09:54 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xfffffffffffffca7) 04:09:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xfffffffffffffca7) 04:09:54 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/103, 0x67}], 0x2, 0x0, 0x0) 04:09:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:54 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xfffffffffffffca7) 04:09:55 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:55 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/103, 0x67}], 0x2, 0x0, 0x0) 04:09:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xfffffffffffffca7) 04:09:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:55 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x18, &(0x7f0000000040)=0xbaa) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) lseek(r1, 0x0, 0x3) creat(&(0x7f00000020c0)='./bus\x00', 0x0) 04:09:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000240)=0xfffffffffffffffd, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 04:09:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:55 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:09:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000240)=0xfffffffffffffffd, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 04:09:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:09:56 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, '\x00', [{}, {0x801, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r2, 0x4, 0x44800) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x7fec}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000006c0)=""/211, 0xd3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}}, {{&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001080)}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) 04:09:56 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:09:56 executing program 3: sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@dioread_nolock}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:09:56 executing program 0: set_mempolicy(0x4001, &(0x7f0000000240)=0xfffffffffffffffd, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 04:09:56 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) dup2(r2, r3) 04:09:56 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x18, &(0x7f0000000040)=0xbaa) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) lseek(r1, 0x0, 0x3) creat(&(0x7f00000020c0)='./bus\x00', 0x0) 04:09:56 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) dup2(r2, r3) 04:09:56 executing program 0: set_mempolicy(0x4001, &(0x7f0000000240)=0xfffffffffffffffd, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) [ 202.470719][ T8216] loop3: detected capacity change from 0 to 131456 04:09:56 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) dup2(r2, r3) 04:09:56 executing program 0: r0 = syz_io_uring_setup(0x2c13, &(0x7f0000001680)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:56 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 202.525692][ T8216] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.537870][ T8216] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 04:09:56 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) dup2(r2, r3) [ 202.626839][ T8216] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,; ,errors=continue. Quota mode: none. [ 202.671423][ T8216] ext4 filesystem being mounted at /root/syzkaller-testdir601674703/syzkaller.E5CpLY/333/file0 supports timestamps until 2038 (0x7fffffff) 04:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 04:09:57 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:09:57 executing program 1: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x6004c050) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x41, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0xa32780e5d2070ec7}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x1}], {}, [{0x8, 0x4}, {0x8, 0x7}, {0x8, 0x2, 0xee01}, {0x8, 0x5, 0xee00}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x7}], {0x8, 0x1}, {0x8}}, 0x84, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000006c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x1001) tkill(0x0, 0x17) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x24, r2, 0x525, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x2, 0x70bd2b, 0x0, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000300)) 04:09:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 04:09:57 executing program 0: r0 = syz_io_uring_setup(0x2c13, &(0x7f0000001680)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:57 executing program 3: sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@dioread_nolock}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:09:57 executing program 0: r0 = syz_io_uring_setup(0x2c13, &(0x7f0000001680)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:09:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_getsetattr(r0, 0x0, 0x0) [ 203.403869][ T8249] loop3: detected capacity change from 0 to 131456 04:09:57 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0x13) 04:09:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) [ 203.448833][ T8249] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.461007][ T8249] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 04:09:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_getsetattr(r0, 0x0, 0x0) 04:09:57 executing program 0: r0 = syz_io_uring_setup(0x2c13, &(0x7f0000001680)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 203.511975][ T8249] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,; ,errors=continue. Quota mode: none. [ 203.524424][ T8249] ext4 filesystem being mounted at /root/syzkaller-testdir601674703/syzkaller.E5CpLY/334/file0 supports timestamps until 2038 (0x7fffffff) 04:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 04:09:57 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 04:09:57 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0x13) 04:09:57 executing program 3: sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@dioread_nolock}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:09:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_getsetattr(r0, 0x0, 0x0) 04:09:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 04:09:57 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0x13) 04:09:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_getsetattr(r0, 0x0, 0x0) 04:09:57 executing program 2: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/224, 0xe0) [ 203.629609][ T8289] loop3: detected capacity change from 0 to 131456 [ 203.655538][ T8289] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.667676][ T8289] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 04:09:57 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0x13) 04:09:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) [ 203.712885][ T22] audit: type=1400 audit(1635307797.509:383): avc: denied { mount } for pid=8298 comm="syz-executor.2" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.765156][ T22] audit: type=1400 audit(1635307797.529:384): avc: denied { mounton } for pid=8298 comm="syz-executor.2" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 203.786741][ T22] audit: type=1400 audit(1635307797.559:385): avc: denied { unmount } for pid=505 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 04:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) [ 203.812206][ T8289] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,; ,errors=continue. Quota mode: none. [ 203.824856][ T8289] ext4 filesystem being mounted at /root/syzkaller-testdir601674703/syzkaller.E5CpLY/335/file0 supports timestamps until 2038 (0x7fffffff) 04:09:57 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:57 executing program 2: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/224, 0xe0) 04:09:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) 04:09:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) 04:09:57 executing program 3: sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@dioread_nolock}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 04:09:57 executing program 2: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/224, 0xe0) 04:09:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) 04:09:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tcp_congestion(r0, 0x0, 0x7) 04:09:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 203.989650][ T8322] loop3: detected capacity change from 0 to 131456 [ 204.012299][ T8322] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.024465][ T8322] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 04:09:57 executing program 2: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/224, 0xe0) 04:09:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 204.078302][ T8322] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,; ,errors=continue. Quota mode: none. [ 204.108146][ T8322] ext4 filesystem being mounted at /root/syzkaller-testdir601674703/syzkaller.E5CpLY/336/file0 supports timestamps until 2038 (0x7fffffff) 04:09:58 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:58 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) dup2(r0, r3) 04:09:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) 04:09:58 executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200100003100f9ffff7f000000000000080000000a0101000601"], 0x120}], 0x1}, 0x0) 04:09:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004dc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000080)={&(0x7f0000004d80), 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x30, r1, 0x613, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}}, 0x0) 04:09:58 executing program 4: prctl$PR_SET_IO_FLUSHER(0xe, 0x0) 04:09:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 04:09:58 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x600100, 0x0) 04:09:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) dup2(r0, r3) 04:09:58 executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200100003100f9ffff7f000000000000080000000a0101000601"], 0x120}], 0x1}, 0x0) [ 204.232537][ T8350] netlink: 242 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.269879][ T8356] netlink: 242 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:58 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48c60, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) [ 204.318016][ T8366] netlink: 242 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:58 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 04:09:58 executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200100003100f9ffff7f000000000000080000000a0101000601"], 0x120}], 0x1}, 0x0) 04:09:58 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48c60, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 04:09:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) dup2(r0, r3) 04:09:58 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:58 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48c60, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 04:09:58 executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}]}, 0x2c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200100003100f9ffff7f000000000000080000000a0101000601"], 0x120}], 0x1}, 0x0) [ 204.473868][ T8386] netlink: 242 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 04:09:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) dup2(r0, r3) 04:09:58 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48c60, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 04:09:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 204.528415][ T8395] netlink: 242 bytes leftover after parsing attributes in process `syz-executor.2'. 04:09:58 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000240)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000380)={{}, {0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0305302, &(0x7f0000000180)={{}, 'port1\x00'}) tkill(r0, 0xb) 04:09:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/75, 0x4b}], 0x2, 0x0, 0x0) 04:09:58 executing program 3: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) 04:09:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 04:09:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8901, &(0x7f0000000080)={'tunl0\x00', @ifru_data=0x0}) 04:09:58 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) unshare(0xa000400) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) 04:09:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 04:09:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8901, &(0x7f0000000080)={'tunl0\x00', @ifru_data=0x0}) 04:09:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 204.759344][ T22] audit: type=1400 audit(1635307798.549:386): avc: denied { read } for pid=8413 comm="syz-executor.4" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 04:09:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/75, 0x4b}], 0x2, 0x0, 0x0) 04:09:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8901, &(0x7f0000000080)={'tunl0\x00', @ifru_data=0x0}) 04:09:58 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) unshare(0xa000400) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) 04:09:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/75, 0x4b}], 0x2, 0x0, 0x0) 04:09:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8901, &(0x7f0000000080)={'tunl0\x00', @ifru_data=0x0}) 04:09:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 04:09:58 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) unshare(0xa000400) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) 04:09:58 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x569d, 0x0, 0x0, 0x0, 0x0) 04:09:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/75, 0x4b}], 0x2, 0x0, 0x0) 04:09:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:09:59 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) unshare(0xa000400) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) 04:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 04:09:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x80000000}, {0xc}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) 04:09:59 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x569d, 0x0, 0x0, 0x0, 0x0) 04:09:59 executing program 4: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x87) write(r0, &(0x7f0000000480)="5d7fc9a27424707bdc000b61cfd1461bd6ef0d4e9be58efdada43c1556c2c1aecb36554ef9451ed3b066e40c65ab64a9b854e2e75b16052c4750c83c1dec57fc8a73f41c62a104cc8e675e90bfa3c3259f4ec3adb9af114c82b1be9ffff23857af1810057bd2b3284f3250561aa7e0a194bf4de66843fe525c3d86c6fd", 0x7d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 04:09:59 executing program 4: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x87) write(r0, &(0x7f0000000480)="5d7fc9a27424707bdc000b61cfd1461bd6ef0d4e9be58efdada43c1556c2c1aecb36554ef9451ed3b066e40c65ab64a9b854e2e75b16052c4750c83c1dec57fc8a73f41c62a104cc8e675e90bfa3c3259f4ec3adb9af114c82b1be9ffff23857af1810057bd2b3284f3250561aa7e0a194bf4de66843fe525c3d86c6fd", 0x7d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 04:09:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002e00)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, 0x0}}, {{&(0x7f0000000140)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}], 0x2, 0x0) [ 205.705753][ T22] audit: type=1400 audit(1635307799.499:387): avc: denied { getopt } for pid=8461 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 04:09:59 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x569d, 0x0, 0x0, 0x0, 0x0) 04:09:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:09:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x80000000}, {0xc}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) 04:09:59 executing program 4: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x87) write(r0, &(0x7f0000000480)="5d7fc9a27424707bdc000b61cfd1461bd6ef0d4e9be58efdada43c1556c2c1aecb36554ef9451ed3b066e40c65ab64a9b854e2e75b16052c4750c83c1dec57fc8a73f41c62a104cc8e675e90bfa3c3259f4ec3adb9af114c82b1be9ffff23857af1810057bd2b3284f3250561aa7e0a194bf4de66843fe525c3d86c6fd", 0x7d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 04:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 205.777182][ T22] audit: type=1400 audit(1635307799.569:388): avc: denied { write } for pid=8472 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 04:09:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000000380)={[{@data_journal}]}) 04:09:59 executing program 4: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x87) write(r0, &(0x7f0000000480)="5d7fc9a27424707bdc000b61cfd1461bd6ef0d4e9be58efdada43c1556c2c1aecb36554ef9451ed3b066e40c65ab64a9b854e2e75b16052c4750c83c1dec57fc8a73f41c62a104cc8e675e90bfa3c3259f4ec3adb9af114c82b1be9ffff23857af1810057bd2b3284f3250561aa7e0a194bf4de66843fe525c3d86c6fd", 0x7d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 04:09:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:09:59 executing program 1: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x569d, 0x0, 0x0, 0x0, 0x0) 04:09:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x80000000}, {0xc}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) 04:09:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:09:59 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) [ 205.874072][ T8490] loop0: detected capacity change from 0 to 131456 04:09:59 executing program 1: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0) 04:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10) write(r0, &(0x7f00000001c0)="240000001a005f2014f9f407000904000200200000000000000000000800030000007432", 0x24) [ 205.939582][ T8490] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10) write(r0, &(0x7f00000001c0)="240000001a005f2014f9f407000904000200200000000000000000000800030000007432", 0x24) 04:09:59 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) [ 205.984144][ T22] audit: type=1400 audit(1635307799.779:389): avc: denied { bind } for pid=8498 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 206.011554][ T8490] loop0: detected capacity change from 0 to 131456 04:09:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000000380)={[{@data_journal}]}) 04:09:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x80000000}, {0xc}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) 04:09:59 executing program 1: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) 04:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 206.029982][ T8490] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10) write(r0, &(0x7f00000001c0)="240000001a005f2014f9f407000904000200200000000000000000000800030000007432", 0x24) 04:09:59 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\t') 04:09:59 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) 04:09:59 executing program 1: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) [ 206.108271][ T8523] loop0: detected capacity change from 0 to 131456 04:09:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10) write(r0, &(0x7f00000001c0)="240000001a005f2014f9f407000904000200200000000000000000000800030000007432", 0x24) 04:09:59 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) 04:10:00 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\t') 04:10:00 executing program 2: r0 = memfd_create(&(0x7f0000000240)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = epoll_create(0x800004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) fcntl$getflags(r0, 0x407) 04:10:00 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\t') 04:10:00 executing program 2: r0 = memfd_create(&(0x7f0000000240)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = epoll_create(0x800004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) fcntl$getflags(r0, 0x407) [ 206.261610][ T8550] loop0: detected capacity change from 0 to 131456 [ 206.287645][ T8550] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal 04:10:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000003c0)=@filename='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x5400, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0xa) 04:10:00 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\t') 04:10:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000000380)={[{@data_journal}]}) 04:10:00 executing program 3: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = epoll_create(0x800004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) fcntl$getflags(r0, 0x407) 04:10:00 executing program 2: r0 = memfd_create(&(0x7f0000000240)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = epoll_create(0x800004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) fcntl$getflags(r0, 0x407) [ 206.443338][ T8568] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal 04:10:00 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000007c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x450001, 0x0, 0x8}, 0x18) 04:10:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) quotactl(0x0, 0x0, 0x0, 0x0) 04:10:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000003c0)=@filename='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x5400, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0xa) 04:10:00 executing program 5: setresuid(0xee01, 0xee01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 04:10:00 executing program 0: openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) setxattr(0x0, &(0x7f0000000500)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 04:10:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:00 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000007c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x450001, 0x0, 0x8}, 0x18) 04:10:00 executing program 5: setresuid(0xee01, 0xee01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 04:10:00 executing program 0: openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) setxattr(0x0, &(0x7f0000000500)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 04:10:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0xc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:10:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9effffff}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}}, 0x0) 04:10:00 executing program 5: setresuid(0xee01, 0xee01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 04:10:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0xc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:10:00 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000007c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x450001, 0x0, 0x8}, 0x18) 04:10:00 executing program 0: openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) setxattr(0x0, &(0x7f0000000500)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 04:10:00 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000007c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x450001, 0x0, 0x8}, 0x18) 04:10:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0xc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:10:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x81080, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2811406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1010c0, 0x0) 04:10:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9effffff}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}}, 0x0) 04:10:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53b", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 04:10:01 executing program 0: openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) setxattr(0x0, &(0x7f0000000500)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) 04:10:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0xc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:10:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x81080, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2811406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1010c0, 0x0) 04:10:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x104530, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 04:10:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9effffff}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}}, 0x0) 04:10:01 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='./cgroup.net/syz0\x00') 04:10:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9effffff}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}}, 0x0) [ 207.751985][ T22] audit: type=1400 audit(1635307801.549:390): avc: denied { remount } for pid=8643 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 04:10:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x81080, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2811406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1010c0, 0x0) 04:10:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003500), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0x40049409, 0x0) 04:10:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x104530, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 04:10:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') lseek(r0, 0x4b, 0x0) 04:10:02 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) 04:10:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') lseek(r0, 0x4b, 0x0) 04:10:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x81080, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2811406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1010c0, 0x0) 04:10:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x104530, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 04:10:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x300}], 0x1) 04:10:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') lseek(r0, 0x4b, 0x0) 04:10:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x300}], 0x1) 04:10:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x2, 0x0, 0x0) 04:10:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x104530, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004112) 04:10:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') lseek(r0, 0x4b, 0x0) 04:10:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x300}], 0x1) 04:10:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ca, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 04:10:03 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) 04:10:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00'}) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 04:10:03 executing program 1: unshare(0x4a060480) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250a000000680001801400020067656e6576653100000000000008000100", @ANYRES32, @ANYBLOB="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", @ANYBLOB="08dd020000726f73653000000000000000002d67a8420000001400"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @loopback, 0x81}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) syz_io_uring_setup(0x6ce0, &(0x7f0000000040), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054a80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r9}], 0x0, "f3c08b7c2924fc"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 04:10:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x300}], 0x1) [ 209.764574][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 209.764619][ C0] sd 0:0:1:0: tag#641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 209.765956][ T8710] loop4: detected capacity change from 0 to 3792 [ 209.771412][ C0] sd 0:0:1:0: tag#641 CDB: opcode=0xe5 (vendor) [ 209.793899][ C0] sd 0:0:1:0: tag#641 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 209.802860][ C0] sd 0:0:1:0: tag#641 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 04:10:03 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) [ 209.811843][ C0] sd 0:0:1:0: tag#641 CDB[20]: ba [ 209.893530][ C0] sd 0:0:1:0: tag#642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 209.903347][ C0] sd 0:0:1:0: tag#642 CDB: opcode=0xe5 (vendor) [ 209.909625][ C0] sd 0:0:1:0: tag#642 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 209.918725][ C0] sd 0:0:1:0: tag#642 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 209.927688][ C0] sd 0:0:1:0: tag#642 CDB[20]: ba 04:10:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044581, 0x0) 04:10:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 04:10:04 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) 04:10:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00'}) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 04:10:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:04 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0x8001, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 210.473013][ T8730] loop3: detected capacity change from 0 to 87 [ 210.490717][ T8725] loop4: detected capacity change from 0 to 3792 [ 210.524079][ C0] sd 0:0:1:0: tag#643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.533887][ C0] sd 0:0:1:0: tag#643 CDB: opcode=0xe5 (vendor) [ 210.540155][ C0] sd 0:0:1:0: tag#643 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 210.549148][ C0] sd 0:0:1:0: tag#643 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 210.558113][ C0] sd 0:0:1:0: tag#643 CDB[20]: ba 04:10:04 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0x8001, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 04:10:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 04:10:04 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) 04:10:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00006c6f775f7574696d3030303009d60d67523030303030303030303030303030302c757466383d312c666d61736b3d30303030303030303030303030303036303230303030302c00060881d4fdb9abf29737b5980fbbe7e6820657f37c74cd28314b620a329e286f154d8d118d1b65929d80040eba03a3e5fc0a3c78020ae211059914518c037876d8fa51ce14fc26543d6da682810f0c2037877884a66055193237000fca927485288efe5fc08686a823030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989e2f9d2528d9f4005a0cf9347fa40169d72e1c2bc46aaf4e01f12f0baaeb6fc070221b2ff858ae6eac0ff29275961f59a76058a981204b038a98bf6306e429c0b8b66f02dcd0be25ee7e82add46d15c84daa5150c77e68dc303d8ddacfd5543b478c6b005dd68e760d654ae2000000000000009626249fc1c3b675904cb500196fc65c978b52bd87fdd37da5dbda000000ce0e0000000000000000dc5224a603673de14afbad33ab7d31894bc64ac0c330998951564dcf7bf57e71276c7fb9623e83f0a2680000310000002000007e77fa074810545c531eaf21778103e37c2f699d942a2c4d6b62de6e88b5144d5705d41105c114debf8f28835929382f522c4944d62915470574a51fd1585bb54d17bc1e64533e1af1d3a3ffa496dfa096c420681670b8c2ea834e66ac06001ff061e08831aca985230880133c1995decba554ce8f686fc3db0094d9117ae05c13ca29ff6eec0d3928a33f1c6f20cd00a00000000000000000f7a9f5b664909ec2f6811832f0a3e98c67aa1700d7f10beed01a8c3afb2cda9f5e109dd2ca4f06dd50665427795023a977e68a6ca649f654c89962f76ce271a482f7757da66f27cf4e1bc5db893be31cdeb33efde0790512307b5da9bd23536ee7cb9b73d11dca0115c1e10e3a3777be88349c2544b7f7e30e8d92575050aa315344fd1165de46b64f783244959a27bfb0d3927ed21d1bddbe29b52baf194d78eed4990fd7fc446f12e5956fd813f99c221e3dfc92eb41022473368132435af68dfab128ffb28a300ea891bdbcfd6204cc17f70bde661a5062fe2f93a4ad38cb311fab3c8116a63b9205340d2bd6a81a600a0877e91a12e86b4ffdcb9652bd1497629e348a1586825f319abcc9d07d1b19c4e9246fd3d075d57d6dd8afda2b6b9ef9b2976cee9b29f5099052b03d7e3af5e464eca457d66d84e8fe0f7522da751fbb4e78538ceebe686a070505890519905abf70528b26221ff7b7193d9e60cba187b270640bd5930d341da59feae4ae2c1d3998f7f8e1aa4282e3d3494a6157bac2eff1e68e675b739eea0a70f39de1a1e10c850c7481f5ba8862c8532de701c1b5e42fbb0af24ecff53d4bf05e58785e166182e3334baf1685f47b2099687cb379db85343979f411f1b7ef289208e6a4f533e20c8727cc48129c7ca0e63e91244157d6253dcb536aecbc7e971f561b2eb232be63f358897b6521bf09f10912608254a8a95f31ebec4b4c7671366015a568c28d11792ac67418e873ac0b09bf055452404a0b73160406580560de938d61cc3e3137b2ef3f28b5cf9bb7c0561fa077f749ebcca8dbc96c2cc884c3bfb0ac5b77b28e1df632505b25e395994b3af960575300d3e93ad7c83e93cc4c34fcb714f2fbbd69283d9e453ed68513a15d34395238f05851a24e588a3afe1ca22173a9b6d8920a49c2e7e110270b014b905c1c4c5be1b8b9451369f1881faaf0480ea0db0b55cfe8a707a14393469239a9a6f20963e843e0c89ec564"]) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00'}) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 04:10:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:04 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0x8001, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 210.588831][ C1] sd 0:0:1:0: tag#644 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.598625][ C1] sd 0:0:1:0: tag#644 CDB: opcode=0xe5 (vendor) [ 210.604910][ C1] sd 0:0:1:0: tag#644 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 210.613869][ C1] sd 0:0:1:0: tag#644 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 210.622820][ C1] sd 0:0:1:0: tag#644 CDB[20]: ba 04:10:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 04:10:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 04:10:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0x8001, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 210.695701][ T8753] loop5: detected capacity change from 0 to 87 [ 210.718559][ T8757] loop3: detected capacity change from 0 to 87 [ 210.724059][ T8754] loop4: detected capacity change from 0 to 3792 [ 210.783735][ C0] sd 0:0:1:0: tag#645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.793623][ C0] sd 0:0:1:0: tag#645 CDB: opcode=0xe5 (vendor) [ 210.799893][ C0] sd 0:0:1:0: tag#645 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 210.808950][ C0] sd 0:0:1:0: tag#645 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 210.817918][ C0] sd 0:0:1:0: tag#645 CDB[20]: ba 04:10:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 2: futex(&(0x7f0000000000)=0x40, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 04:10:04 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x100010, 0x10007d}, 0x54) [ 210.833191][ C1] sd 0:0:1:0: tag#650 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.842973][ C1] sd 0:0:1:0: tag#650 CDB: opcode=0xe5 (vendor) [ 210.849320][ C1] sd 0:0:1:0: tag#650 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 210.858413][ C1] sd 0:0:1:0: tag#650 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 210.867370][ C1] sd 0:0:1:0: tag#650 CDB[20]: ba 04:10:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0_to_bridge\x00'}) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 04:10:04 executing program 2: futex(&(0x7f0000000000)=0x40, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 04:10:04 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x100010, 0x10007d}, 0x54) 04:10:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) [ 210.941814][ C0] sd 0:0:1:0: tag#651 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 210.951599][ C0] sd 0:0:1:0: tag#651 CDB: opcode=0xe5 (vendor) [ 210.957874][ C0] sd 0:0:1:0: tag#651 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 210.966914][ C0] sd 0:0:1:0: tag#651 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 210.976040][ C0] sd 0:0:1:0: tag#651 CDB[20]: ba 04:10:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 04:10:04 executing program 2: futex(&(0x7f0000000000)=0x40, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 04:10:04 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x100010, 0x10007d}, 0x54) [ 211.009845][ T8780] loop4: detected capacity change from 0 to 3792 [ 211.048013][ T8788] loop3: detected capacity change from 0 to 87 [ 211.114043][ C1] sd 0:0:1:0: tag#652 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.123846][ C1] sd 0:0:1:0: tag#652 CDB: opcode=0xe5 (vendor) [ 211.130106][ C1] sd 0:0:1:0: tag#652 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 211.139199][ C1] sd 0:0:1:0: tag#652 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 211.148196][ C1] sd 0:0:1:0: tag#652 CDB[20]: ba 04:10:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='ro']) 04:10:05 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x100010, 0x10007d}, 0x54) 04:10:05 executing program 2: futex(&(0x7f0000000000)=0x40, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000000)) 04:10:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xff) 04:10:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x20000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "45146335e226df"}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40084504, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:10:05 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cbcmac(aes)\x00'}}, 0x0, 0x0) [ 211.774477][ T8796] loop3: detected capacity change from 0 to 87 04:10:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xff) 04:10:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xff) 04:10:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='ro']) [ 211.825264][ C0] sd 0:0:1:0: tag#653 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.835143][ C0] sd 0:0:1:0: tag#653 CDB: opcode=0xe5 (vendor) [ 211.841546][ C0] sd 0:0:1:0: tag#653 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 211.850955][ C0] sd 0:0:1:0: tag#653 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 211.860087][ C0] sd 0:0:1:0: tag#653 CDB[20]: ba 04:10:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 04:10:05 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 211.881667][ T8811] loop5: detected capacity change from 0 to 87 [ 211.921169][ C0] sd 0:0:1:0: tag#654 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 04:10:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='ro']) 04:10:05 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cbcmac(aes)\x00'}}, 0x0, 0x0) 04:10:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xff) 04:10:05 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cbcmac(aes)\x00'}}, 0x0, 0x0) 04:10:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 04:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="d50eb9651f1c9ceb2958352d7c00709849523b039a2aa89cc642a9f89b373572", 0x20) 04:10:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='ro']) [ 211.930942][ C0] sd 0:0:1:0: tag#654 CDB: opcode=0xe5 (vendor) [ 211.937214][ C0] sd 0:0:1:0: tag#654 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 211.946211][ C0] sd 0:0:1:0: tag#654 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 211.955185][ C0] sd 0:0:1:0: tag#654 CDB[20]: ba 04:10:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 04:10:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000080)="2a684c406c709139f30906f10cd66ca980f7fa30f1f9dab7d3a67a138140f216c24736fa6af687eede2d8cf0d2e63a84be5bf4", 0x33}, {&(0x7f0000001000)="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", 0x11a}, {&(0x7f0000000180)="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", 0x460}], 0x3) recvfrom(r0, 0x0, 0x836, 0x0, 0x0, 0x0) 04:10:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000000)={0xe3}) 04:10:05 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cbcmac(aes)\x00'}}, 0x0, 0x0) 04:10:05 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:10:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 04:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="d50eb9651f1c9ceb2958352d7c00709849523b039a2aa89cc642a9f89b373572", 0x20) 04:10:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000080)="2a684c406c709139f30906f10cd66ca980f7fa30f1f9dab7d3a67a138140f216c24736fa6af687eede2d8cf0d2e63a84be5bf4", 0x33}, {&(0x7f0000001000)="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", 0x11a}, {&(0x7f0000000180)="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", 0x460}], 0x3) recvfrom(r0, 0x0, 0x836, 0x0, 0x0, 0x0) 04:10:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000000)={0xe3}) 04:10:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCGWINSZ(r0, 0x5608, 0x0) 04:10:05 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:10:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 04:10:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000000)={0xe3}) 04:10:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="d50eb9651f1c9ceb2958352d7c00709849523b039a2aa89cc642a9f89b373572", 0x20) 04:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCGWINSZ(r0, 0x5608, 0x0) 04:10:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000080)="2a684c406c709139f30906f10cd66ca980f7fa30f1f9dab7d3a67a138140f216c24736fa6af687eede2d8cf0d2e63a84be5bf4", 0x33}, {&(0x7f0000001000)="d41da93f851517ec6010874e93497540735f0799f036f8e7fd78ce0ce975b71a994071b2093cd2eb86511b4bcd15b85139c8d7d3e13e9aae78eecba2bc452fa92811025d00d109f7b9b7c1b4beab02dcbf05abd77c3982556c21048ad33c78365aff38635245769b5d4d64fb1697a69d6089c4c1eabba8b4ff8160ada9e868450918e60fb5ba83d930c13146de4d5487831edc5fe671e46efefe984b88ec6e09d5aac9741a44ab1d812925c21fdbdeecfe20cfa12a7cfc33f8521fc31ebf4775710e11928b721893ac16977a8b1aabfc172c2f6be31b13d6e988015cecb8896dc5e9d5eca93f6a8120d6bfdec332b84634c26b56ac476ce9d8fd1950290d17204646d39a8ee34ae32838f3c88833b4054f8dc4f14c5cd9259142", 0x11a}, {&(0x7f0000000180)="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", 0x460}], 0x3) recvfrom(r0, 0x0, 0x836, 0x0, 0x0, 0x0) 04:10:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 04:10:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000000)={0xe3}) 04:10:06 executing program 3: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCGWINSZ(r0, 0x5608, 0x0) 04:10:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="d50eb9651f1c9ceb2958352d7c00709849523b039a2aa89cc642a9f89b373572", 0x20) 04:10:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000080)="2a684c406c709139f30906f10cd66ca980f7fa30f1f9dab7d3a67a138140f216c24736fa6af687eede2d8cf0d2e63a84be5bf4", 0x33}, {&(0x7f0000001000)="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", 0x11a}, {&(0x7f0000000180)="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", 0x460}], 0x3) recvfrom(r0, 0x0, 0x836, 0x0, 0x0, 0x0) 04:10:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 04:10:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 04:10:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu|0||\t!\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') 04:10:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={0x0, 0x8}) 04:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCGWINSZ(r0, 0x5608, 0x0) 04:10:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @random="b52aa03ef753"}, 0x14) 04:10:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={0x0, 0x8}) [ 212.354323][ T8885] sg_write: 9 callbacks suppressed [ 212.354333][ T8885] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 212.354333][ T8885] program syz-executor.0 not setting count and/or reply_len properly 04:10:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}], [], 0x2}}) 04:10:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @random="b52aa03ef753"}, 0x14) 04:10:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 04:10:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 212.410657][ T8897] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 212.410657][ T8897] program syz-executor.0 not setting count and/or reply_len properly 04:10:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu|0||\t!\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') 04:10:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 04:10:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 04:10:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={0x0, 0x8}) 04:10:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 04:10:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @random="b52aa03ef753"}, 0x14) [ 212.489927][ T8907] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 212.489927][ T8907] program syz-executor.0 not setting count and/or reply_len properly 04:10:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 04:10:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu|0||\t!\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') [ 212.549080][ T8917] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 212.549080][ T8917] program syz-executor.0 not setting count and/or reply_len properly 04:10:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @random="b52aa03ef753"}, 0x14) 04:10:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x2001001000000000, 0xfffffdef}}, 0x1c, 0x0}, 0x0) 04:10:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 04:10:06 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={0x0, 0x8}) 04:10:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) 04:10:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001600)='cpu|0||\t!\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') 04:10:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x2001001000000000, 0xfffffdef}}, 0x1c, 0x0}, 0x0) 04:10:06 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x1) 04:10:06 executing program 2: prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffefff) 04:10:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x2001001000000000, 0xfffffdef}}, 0x1c, 0x0}, 0x0) [ 212.661705][ T8933] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 212.661705][ T8933] program syz-executor.0 not setting count and/or reply_len properly 04:10:06 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x1) 04:10:06 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0xc52) io_uring_enter(r0, 0x305, 0x0, 0x0, 0x0, 0x0) 04:10:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001300)='keyring\x00', &(0x7f0000001340)={'syz', 0x3}, &(0x7f0000001380)='syz', r0) 04:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 04:10:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x2001001000000000, 0xfffffdef}}, 0x1c, 0x0}, 0x0) 04:10:06 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x1) 04:10:06 executing program 2: prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffefff) 04:10:06 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1b}, 0x18) 04:10:06 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0xc52) io_uring_enter(r0, 0x305, 0x0, 0x0, 0x0, 0x0) 04:10:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="290000005200190f00003fffffffc20602000f0000e80001ec040000040d000a00ea11000000050000", 0x29}], 0x1) recvmmsg(r0, &(0x7f0000005b00), 0x40000000000017b, 0x10022, 0x0) 04:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 04:10:06 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x1) 04:10:06 executing program 2: prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffefff) 04:10:06 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1b}, 0x18) 04:10:06 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0xc52) io_uring_enter(r0, 0x305, 0x0, 0x0, 0x0, 0x0) 04:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 04:10:06 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1b}, 0x18) 04:10:06 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:06 executing program 2: prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffefff) 04:10:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="290000005200190f00003fffffffc20602000f0000e80001ec040000040d000a00ea11000000050000", 0x29}], 0x1) recvmmsg(r0, &(0x7f0000005b00), 0x40000000000017b, 0x10022, 0x0) 04:10:06 executing program 3: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0, 0xfffffc63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0xc52) io_uring_enter(r0, 0x305, 0x0, 0x0, 0x0, 0x0) 04:10:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 04:10:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0x4) 04:10:06 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1b}, 0x18) 04:10:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="290000005200190f00003fffffffc20602000f0000e80001ec040000040d000a00ea11000000050000", 0x29}], 0x1) recvmmsg(r0, &(0x7f0000005b00), 0x40000000000017b, 0x10022, 0x0) 04:10:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x33, 0x0) 04:10:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000000)='\x00', 0x1, 0x4000055, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 04:10:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="290000005200190f00003fffffffc20602000f0000e80001ec040000040d000a00ea11000000050000", 0x29}], 0x1) recvmmsg(r0, &(0x7f0000005b00), 0x40000000000017b, 0x10022, 0x0) 04:10:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:10:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000000)='\x00', 0x1, 0x4000055, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 04:10:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x33, 0x0) 04:10:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0x4) 04:10:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:10:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 04:10:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000000)='\x00', 0x1, 0x4000055, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 04:10:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:10:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0x4) 04:10:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x33, 0x0) [ 214.179220][ T9026] loop1: detected capacity change from 0 to 512 04:10:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 04:10:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000000)='\x00', 0x1, 0x4000055, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="dc", 0x1}], 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) [ 214.233738][ T9026] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.256816][ T22] audit: type=1400 audit(1635307808.049:391): avc: denied { read write open } for pid=9025 comm="syz-executor.1" path=2F726F6F742F73797A6B616C6C65722D746573746469723330343836323731342F73797A6B616C6C65722E75454B73364D2F3337332F66696C65302F233137202864656C6574656429 dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.301226][ T9026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:399: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 214.325298][ T9026] EXT4-fs (loop1): Delayed block allocation failed for inode 17 at logical offset 0 with max blocks 1 with error 117 [ 214.337755][ T9026] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.337755][ T9026] [ 214.358651][ T9026] syz-executor.1 (9026) used greatest stack depth: 10352 bytes left 04:10:08 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:08 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x33, 0x0) 04:10:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000000), 0x4) 04:10:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78a200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, 0x0, 0x0) 04:10:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 04:10:08 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 04:10:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78a200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, 0x0, 0x0) 04:10:08 executing program 3: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18) [ 214.764859][ T9058] loop1: detected capacity change from 0 to 512 04:10:08 executing program 3: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18) 04:10:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78a200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, 0x0, 0x0) [ 214.812514][ T22] audit: type=1400 audit(1635307808.609:392): avc: denied { mac_admin } for pid=9069 comm="syz-executor.2" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.829972][ T9073] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 214.841454][ T9058] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.854675][ T22] audit: type=1400 audit(1635307808.639:393): avc: denied { relabelto } for pid=9069 comm="syz-executor.2" name="file0" dev="sda1" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 214.868757][ T9058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:399: comm syz-executor.1: bg 0: block 2: invalid block bitmap 04:10:08 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) [ 214.882351][ T22] audit: type=1400 audit(1635307808.639:394): avc: denied { setattr } for pid=9069 comm="syz-executor.2" name="file0" dev="sda1" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 214.922070][ T22] audit: type=1400 audit(1635307808.639:395): avc: denied { write } for pid=9069 comm="syz-executor.2" path="/root/syzkaller-testdir236902673/syzkaller.G4eyUP/368/file0" dev="sda1" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 214.953738][ T22] audit: type=1400 audit(1635307808.719:396): avc: denied { unlink } for pid=505 comm="syz-executor.2" name="file0" dev="sda1" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 214.956259][ T9058] EXT4-fs (loop1): Delayed block allocation failed for inode 17 at logical offset 0 with max blocks 1 with error 28 [ 214.993062][ T9058] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.993062][ T9058] [ 215.002794][ T9058] EXT4-fs (loop1): Total free blocks count 0 [ 215.008829][ T9058] EXT4-fs (loop1): Free/Dirty block details [ 215.014729][ T9058] EXT4-fs (loop1): free_blocks=0 [ 215.019683][ T9058] EXT4-fs (loop1): dirty_blocks=1 [ 215.024772][ T9058] EXT4-fs (loop1): Block reservation details [ 215.030767][ T9058] EXT4-fs (loop1): i_reserved_data_blocks=1 04:10:09 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:09 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:09 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78a200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, 0x0, 0x0) 04:10:09 executing program 3: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18) 04:10:09 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 04:10:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 04:10:09 executing program 3: mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18) 04:10:09 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 04:10:09 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 04:10:09 executing program 3: socketpair$unix(0x2, 0x5, 0x0, &(0x7f0000000000)) [ 215.331062][ T9100] loop1: detected capacity change from 0 to 512 [ 215.362526][ T9100] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 04:10:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x52d5, &(0x7f00000022c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xa, &(0x7f0000000200), 0x0) [ 215.376532][ T9100] EXT4-fs error (device loop1): ext4_validate_block_bitmap:399: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 215.395073][ T9100] EXT4-fs (loop1): Delayed block allocation failed for inode 17 at logical offset 0 with max blocks 1 with error 28 [ 215.407551][ T9100] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.407551][ T9100] [ 215.417238][ T9100] EXT4-fs (loop1): Total free blocks count 0 [ 215.423233][ T9100] EXT4-fs (loop1): Free/Dirty block details 04:10:09 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) [ 215.429138][ T9100] EXT4-fs (loop1): free_blocks=0 [ 215.434174][ T9100] EXT4-fs (loop1): dirty_blocks=1 [ 215.439206][ T9100] EXT4-fs (loop1): Block reservation details [ 215.445556][ T9100] EXT4-fs (loop1): i_reserved_data_blocks=1 04:10:09 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4770}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa240, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, 0x0}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 04:10:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x52d5, &(0x7f00000022c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xa, &(0x7f0000000200), 0x0) 04:10:09 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="73656375726974792e2f6465762f736e3a1f65"], 0x0, 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', 'system_u:object_r:systemd_unit_file_t:s0\x00'}, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 04:10:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x518302, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 04:10:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x8, 0x0, 0x0) 04:10:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x8, 0x0, 0x0) 04:10:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x52d5, &(0x7f00000022c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xa, &(0x7f0000000200), 0x0) [ 215.868954][ T9129] loop1: detected capacity change from 0 to 512 [ 215.902245][ T9129] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 04:10:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x8, 0x0, 0x0) 04:10:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x52d5, &(0x7f00000022c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xa, &(0x7f0000000200), 0x0) [ 215.932785][ T9129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:399: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 215.960051][ T9129] EXT4-fs (loop1): Delayed block allocation failed for inode 17 at logical offset 0 with max blocks 1 with error 28 [ 215.972267][ T9129] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.972267][ T9129] 04:10:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x8, 0x0, 0x0) [ 215.981980][ T9129] EXT4-fs (loop1): Total free blocks count 0 [ 215.988016][ T9129] EXT4-fs (loop1): Free/Dirty block details [ 215.994040][ T9129] EXT4-fs (loop1): free_blocks=0 [ 215.999026][ T9129] EXT4-fs (loop1): dirty_blocks=1 [ 216.004113][ T9129] EXT4-fs (loop1): Block reservation details [ 216.010273][ T9129] EXT4-fs (loop1): i_reserved_data_blocks=1 04:10:10 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) 04:10:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"}) 04:10:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f00000001c0), 0x0) 04:10:10 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {r3, r4}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r6, r4}, {r2}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r5}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {r3}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {}, {}, {}, {r2}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057a80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "5c29ef995b9b33"}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058a80)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7}], 0x9, "726b97fe52e6b8"}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0x11fffffc7) 04:10:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:10:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:10:10 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) [ 216.960730][ T22] audit: type=1400 audit(1635307810.759:397): avc: denied { create } for pid=9147 comm="syz-executor.5" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 216.981667][ T22] audit: type=1400 audit(1635307810.759:398): avc: denied { read write } for pid=9147 comm="syz-executor.5" name="file0" dev="sda1" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 04:10:10 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) 04:10:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0xfdfdffff}}) 04:10:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"}) 04:10:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:10:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:10:10 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) 04:10:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"}) 04:10:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 217.203977][ T22] audit: type=1400 audit(1635307810.809:399): avc: denied { execute } for pid=9149 comm="syz-executor.1" path="/root/syzkaller-testdir304862714/syzkaller.uEKs6M/377/file0/bus" dev="ramfs" ino=29663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=file permissive=1 [ 217.231787][ T22] audit: type=1400 audit(1635307810.809:400): avc: denied { unlink } for pid=4221 comm="syz-executor.5" name="file0" dev="sda1" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 04:10:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:10:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0xfdfdffff}}) 04:10:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x401, 0x9000000, 0x0, {0xa}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0xff0f0000}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}]}]}, 0x7c}}, 0x0) 04:10:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xfe8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000380)={0x10017, 0x0, 0x0, 0x0, 0x0, "0001227b7c00faff050000fff7fffffffffdf0"}) 04:10:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {r3, r4}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r6, r4}, {r2}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r5}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {r3}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {}, {}, {}, {r2}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057a80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "5c29ef995b9b33"}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058a80)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7}], 0x9, "726b97fe52e6b8"}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0x11fffffc7) 04:10:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:10:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000e98a6f2b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "fe707dc601d86be05b552b64eb847f9c2bdceb"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r1, 0x0, 0x2000) dup2(r2, r0) 04:10:11 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) [ 217.323439][ T9186] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 217.331553][ T9186] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:10:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0xfdfdffff}}) 04:10:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x401, 0x9000000, 0x0, {0xa}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0xff0f0000}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}]}]}, 0x7c}}, 0x0) 04:10:11 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0xfdfdffff}}) 04:10:11 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000e98a6f2b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "fe707dc601d86be05b552b64eb847f9c2bdceb"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r1, 0x0, 0x2000) dup2(r2, r0) 04:10:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {r3, r4}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r6, r4}, {r2}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r5}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {r3}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {}, {}, {}, {r2}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057a80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "5c29ef995b9b33"}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058a80)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7}], 0x9, "726b97fe52e6b8"}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0x11fffffc7) [ 217.436624][ T9202] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 217.444795][ T9202] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:10:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x401, 0x9000000, 0x0, {0xa}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0xff0f0000}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}]}]}, 0x7c}}, 0x0) 04:10:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:10:11 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000e98a6f2b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "fe707dc601d86be05b552b64eb847f9c2bdceb"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r1, 0x0, 0x2000) dup2(r2, r0) [ 217.550963][ T9217] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 217.559064][ T9217] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:10:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, 0x1, 0x1, 0x401, 0x9000000, 0x0, {0xa}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0xff0f0000}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}]}]}, 0x7c}}, 0x0) 04:10:11 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 04:10:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=""/40, 0x28}) 04:10:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000e98a6f2b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "fe707dc601d86be05b552b64eb847f9c2bdceb"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read(r1, 0x0, 0x2000) dup2(r2, r0) [ 217.646898][ T9228] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 217.655022][ T9228] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:10:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, r4}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {r3, r4}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r6, r4}, {r2}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r5}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {r3}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {}, {}, {}, {r2}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057a80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "5c29ef995b9b33"}) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058a80)={0x21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7}], 0x9, "726b97fe52e6b8"}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0x11fffffc7) 04:10:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) 04:10:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, 0xfffffffffffffffe) 04:10:11 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) clone(0x82140900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$usbmon(r1, 0x0, 0x0) 04:10:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, 0xfffffffffffffffe) 04:10:11 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 04:10:11 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006a80), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mkdirat(r2, &(0x7f0000006ac0)='./file0\x00', 0x0) 04:10:11 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x488000, 0xc2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) dup2(r3, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r4 = eventfd2(0x0, 0x801) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x250ce47f) dup3(r5, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r7, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1, 0x0, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000080), 0x8) 04:10:11 executing program 4: syz_io_uring_setup(0x4537, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:10:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, 0xfffffffffffffffe) 04:10:11 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006a80), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mkdirat(r2, &(0x7f0000006ac0)='./file0\x00', 0x0) 04:10:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, 0xfffffffffffffffe) 04:10:11 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006a80), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mkdirat(r2, &(0x7f0000006ac0)='./file0\x00', 0x0) 04:10:11 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x41) 04:10:11 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x119040}, 0x18) mount$9p_fd(0x20100000, &(0x7f0000002480)='./file1\x00', 0x0, 0x1100, 0x0) 04:10:12 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) clone(0x82140900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$usbmon(r1, 0x0, 0x0) 04:10:12 executing program 3: open(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x141042, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = dup3(r1, r0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 04:10:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x119040}, 0x18) mount$9p_fd(0x20100000, &(0x7f0000002480)='./file1\x00', 0x0, 0x1100, 0x0) 04:10:12 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006a80), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mkdirat(r2, &(0x7f0000006ac0)='./file0\x00', 0x0) 04:10:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x41) 04:10:12 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x119040}, 0x18) mount$9p_fd(0x20100000, &(0x7f0000002480)='./file1\x00', 0x0, 0x1100, 0x0) 04:10:12 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, &(0x7f00000001c0)) 04:10:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x41) 04:10:12 executing program 1: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x119040}, 0x18) mount$9p_fd(0x20100000, &(0x7f0000002480)='./file1\x00', 0x0, 0x1100, 0x0) 04:10:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x41) 04:10:12 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, &(0x7f00000001c0)) 04:10:13 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) clone(0x82140900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$usbmon(r1, 0x0, 0x0) 04:10:13 executing program 3: open(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x141042, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = dup3(r1, r0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 04:10:13 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000280)='./file1/file1\x00', 0x0) 04:10:13 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, &(0x7f00000001c0)) 04:10:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 04:10:13 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:13 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8936, &(0x7f00000001c0)) 04:10:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 04:10:13 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000280)='./file1/file1\x00', 0x0) 04:10:13 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 04:10:13 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000280)='./file1/file1\x00', 0x0) [ 219.728236][ T9319] syz-executor.2 (9319) used greatest stack depth: 9984 bytes left 04:10:14 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r1 = dup(r0) clone(0x82140900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$usbmon(r1, 0x0, 0x0) 04:10:14 executing program 3: open(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x141042, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = dup3(r1, r0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 04:10:14 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000280)='./file1/file1\x00', 0x0) 04:10:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 04:10:14 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:14 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:14 executing program 1: perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fcntl$notify(r0, 0x402, 0x8000000b) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) 04:10:14 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x132, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000603000/0x8000)=nil, 0x8000, 0x0, 0x3b993282b89afabc, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000002, 0xffffffffffffffff) 04:10:14 executing program 1: perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fcntl$notify(r0, 0x402, 0x8000000b) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) 04:10:14 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x132, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000603000/0x8000)=nil, 0x8000, 0x0, 0x3b993282b89afabc, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000002, 0xffffffffffffffff) [ 220.476726][ T22] audit: type=1400 audit(1635307814.269:401): avc: denied { watch watch_reads } for pid=9351 comm="syz-executor.1" path="/proc/9351/task/9352/attr" dev="proc" ino=30954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 04:10:14 executing program 1: perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fcntl$notify(r0, 0x402, 0x8000000b) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) 04:10:14 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x80041284, &(0x7f0000006840)) 04:10:15 executing program 3: open(&(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x141042, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = dup3(r1, r0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 04:10:15 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x132, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000603000/0x8000)=nil, 0x8000, 0x0, 0x3b993282b89afabc, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000002, 0xffffffffffffffff) 04:10:15 executing program 1: perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fcntl$notify(r0, 0x402, 0x8000000b) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) 04:10:15 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x10000d, r4, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 04:10:15 executing program 5: unshare(0x40040400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x284400, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 04:10:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x80041284, &(0x7f0000006840)) 04:10:15 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x132, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000603000/0x8000)=nil, 0x8000, 0x0, 0x3b993282b89afabc, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1000002, 0xffffffffffffffff) 04:10:15 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:10:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x80041284, &(0x7f0000006840)) 04:10:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x5c}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 04:10:15 executing program 5: unshare(0x40040400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x284400, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 04:10:15 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc00000014000705ab092509b86807000aab08010202000004000e93210001c0f0040048040000010000000000039815fa2c53c28648000000b9d956620d7a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a36313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f0000080548deac279c", 0xfc) [ 221.411069][ T22] audit: type=1326 audit(1635307815.209:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:10:15 executing program 0: modify_ldt$write(0x1, &(0x7f0000000100), 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f00000000c0), 0x10) 04:10:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x80041284, &(0x7f0000006840)) 04:10:15 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc00000014000705ab092509b86807000aab08010202000004000e93210001c0f0040048040000010000000000039815fa2c53c28648000000b9d956620d7a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a36313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f0000080548deac279c", 0xfc) 04:10:15 executing program 5: unshare(0x40040400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x284400, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 04:10:15 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc}) 04:10:16 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2, 0x91}) 04:10:16 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:10:16 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600), 0x4, 0x0) 04:10:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc}) [ 222.245234][ T22] audit: type=1326 audit(1635307816.039:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:10:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x5c}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 04:10:16 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2, 0x91}) 04:10:16 executing program 5: unshare(0x40040400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x284400, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 04:10:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc}) 04:10:16 executing program 1: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:10:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc}) 04:10:16 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600), 0x4, 0x0) [ 222.342122][ T22] audit: type=1326 audit(1635307816.139:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:10:16 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2, 0x91}) 04:10:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:16 executing program 1: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 222.439164][ C1] sd 0:0:1:0: tag#666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.448938][ C1] sd 0:0:1:0: tag#666 CDB: opcode=0xe5 (vendor) [ 222.455230][ C1] sd 0:0:1:0: tag#666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 222.455850][ T22] audit: type=1400 audit(1635307816.249:405): avc: denied { remove_name } for pid=362 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.464197][ C1] sd 0:0:1:0: tag#666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 222.486585][ T22] audit: type=1400 audit(1635307816.249:406): avc: denied { rename } for pid=362 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.495497][ C1] sd 0:0:1:0: tag#666 CDB[20]: ba 04:10:16 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600), 0x4, 0x0) 04:10:16 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1d000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e18000/0xc000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000907000/0x1000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f0000ab7000/0x1000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f00008f2000/0x3000)=nil, &(0x7f0000c6a000/0x2000)=nil, &(0x7f00009f1000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c57000/0x3000)=nil) [ 222.517509][ T22] audit: type=1400 audit(1635307816.249:407): avc: denied { create } for pid=362 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.559178][ C0] sd 0:0:1:0: tag#667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 222.569222][ C0] sd 0:0:1:0: tag#667 CDB: opcode=0xe5 (vendor) [ 222.575478][ C0] sd 0:0:1:0: tag#667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 222.584780][ C0] sd 0:0:1:0: tag#667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 222.593737][ C0] sd 0:0:1:0: tag#667 CDB[20]: ba 04:10:16 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x5c}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 04:10:16 executing program 1: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:10:16 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2, 0x91}) 04:10:16 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1d000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e18000/0xc000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000907000/0x1000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f0000ab7000/0x1000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f00008f2000/0x3000)=nil, &(0x7f0000c6a000/0x2000)=nil, &(0x7f00009f1000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c57000/0x3000)=nil) 04:10:16 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000140), 0x24, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600), 0x4, 0x0) 04:10:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 1: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 04:10:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1d000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e18000/0xc000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000907000/0x1000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f0000ab7000/0x1000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f00008f2000/0x3000)=nil, &(0x7f0000c6a000/0x2000)=nil, &(0x7f00009f1000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c57000/0x3000)=nil) [ 223.204005][ C1] sd 0:0:1:0: tag#668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.213824][ C1] sd 0:0:1:0: tag#668 CDB: opcode=0xe5 (vendor) [ 223.220099][ C1] sd 0:0:1:0: tag#668 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 223.229147][ C1] sd 0:0:1:0: tag#668 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 223.238302][ C1] sd 0:0:1:0: tag#668 CDB[20]: ba 04:10:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 3: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1d000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e18000/0xc000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000907000/0x1000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f0000ab7000/0x1000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f00008f2000/0x3000)=nil, &(0x7f0000c6a000/0x2000)=nil, &(0x7f00009f1000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c57000/0x3000)=nil) [ 223.259221][ T22] audit: type=1326 audit(1635307817.049:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 [ 223.306996][ C1] sd 0:0:1:0: tag#669 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.307350][ C0] sd 0:0:1:0: tag#670 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.316780][ C1] sd 0:0:1:0: tag#669 CDB: opcode=0xe5 (vendor) [ 223.326477][ C0] sd 0:0:1:0: tag#670 CDB: opcode=0xe5 (vendor) [ 223.332706][ C1] sd 0:0:1:0: tag#669 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 223.338919][ C0] sd 0:0:1:0: tag#670 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 223.347833][ C1] sd 0:0:1:0: tag#669 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 223.356752][ C0] sd 0:0:1:0: tag#670 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 223.356770][ C0] sd 0:0:1:0: tag#670 CDB[20]: ba [ 223.365699][ C1] sd 0:0:1:0: tag#669 CDB[20]: ba [ 223.410811][ C1] sd 0:0:1:0: tag#671 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 223.420591][ C1] sd 0:0:1:0: tag#671 CDB: opcode=0xe5 (vendor) [ 223.426842][ C1] sd 0:0:1:0: tag#671 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 223.435840][ C1] sd 0:0:1:0: tag#671 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 223.444999][ C1] sd 0:0:1:0: tag#671 CDB[20]: ba 04:10:17 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x5c}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 04:10:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) [ 224.108024][ C0] sd 0:0:1:0: tag#672 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.117792][ C0] sd 0:0:1:0: tag#672 CDB: opcode=0xe5 (vendor) [ 224.119309][ C1] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.124044][ C0] sd 0:0:1:0: tag#672 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 224.133753][ C1] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 224.142657][ C0] sd 0:0:1:0: tag#672 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 224.148880][ C1] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 224.157817][ C0] sd 0:0:1:0: tag#672 CDB[20]: ba [ 224.166722][ C1] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 224.180656][ C1] sd 0:0:1:0: tag#673 CDB[20]: ba [ 224.195056][ C0] sd 0:0:1:0: tag#674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 04:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) [ 224.204804][ C0] sd 0:0:1:0: tag#674 CDB: opcode=0xe5 (vendor) [ 224.211064][ C0] sd 0:0:1:0: tag#674 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 224.220076][ C0] sd 0:0:1:0: tag#674 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 224.227270][ C1] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 224.229015][ C0] sd 0:0:1:0: tag#674 CDB[20]: ba [ 224.238724][ C1] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 224.249967][ C1] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 04:10:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) [ 224.258925][ C1] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 224.267900][ C1] sd 0:0:1:0: tag#676 CDB[20]: ba 04:10:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) 04:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/23, 0x17, 0xa00) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x3, 0x93c, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x9}, 0x5e22, 0xf8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x591}, 0xffffffffffffffff, 0xa, r2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/23, 0x17, 0xa00) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) pread64(r4, &(0x7f0000000080)=""/23, 0x17, 0xa00) pread64(r0, 0x0, 0x6c, 0x0) [ 224.302557][ T22] audit: type=1326 audit(1635307818.099:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee57da9a39 code=0x0 04:10:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000001240)={[{@norecovery}, {@journal_async_commit}]}) 04:10:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:10:18 executing program 1: unshare(0x400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\')(}\\*\x00', &(0x7f0000000f00)="1f", 0x1) 04:10:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="3befff777aeb336371de2b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "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"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 224.395244][ T9500] loop4: detected capacity change from 0 to 512 [ 224.412651][ T9502] loop5: detected capacity change from 0 to 264192 [ 224.435119][ T9500] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal 04:10:18 executing program 0: clone3(&(0x7f0000000000)={0x8000, 0x0, 0x0, 0x0, {}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58) 04:10:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="66530700ae897094e7b1283000000000000000655ef5f0166391468f72e44a260f82e8a9bfc92b10559f1e4325268a957d16c8070a35b19cdb9631eeb3d3490f6b92c0f77bcbfd3141c3d6fd563431eaf1fa1b51f413e51552ec3f198c2c76958b380500f9901d6d81a692533af5d09a8acec090204ddc7c7e6ca68542887cd0bc9e28d1464a09e26f6479df4e1cb77024d93e692b8768f83930ece234fa822bb86ce7bcb7b924adc9ea91bbdb4677fd39e221070b17c44b92e5687645516b11bf809a163debfcaf006305b0f028e39758b46e5e5cafb644f29b", 0xda}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) tkill(r0, 0x21) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 04:10:18 executing program 1: unshare(0x400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\')(}\\*\x00', &(0x7f0000000f00)="1f", 0x1) 04:10:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="3befff777aeb336371de2b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "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"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 04:10:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="66530700ae897094e7b1283000000000000000655ef5f0166391468f72e44a260f82e8a9bfc92b10559f1e4325268a957d16c8070a35b19cdb9631eeb3d3490f6b92c0f77bcbfd3141c3d6fd563431eaf1fa1b51f413e51552ec3f198c2c76958b380500f9901d6d81a692533af5d09a8acec090204ddc7c7e6ca68542887cd0bc9e28d1464a09e26f6479df4e1cb77024d93e692b8768f83930ece234fa822bb86ce7bcb7b924adc9ea91bbdb4677fd39e221070b17c44b92e5687645516b11bf809a163debfcaf006305b0f028e39758b46e5e5cafb644f29b", 0xda}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) tkill(r0, 0x21) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) [ 224.469944][ T9502] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.476525][ T9502] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 224.490570][ T9502] EXT4-fs (loop5): Cannot turn on quotas: error -22 04:10:18 executing program 0: clone3(&(0x7f0000000000)={0x8000, 0x0, 0x0, 0x0, {}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58) 04:10:18 executing program 1: unshare(0x400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\')(}\\*\x00', &(0x7f0000000f00)="1f", 0x1) 04:10:18 executing program 0: clone3(&(0x7f0000000000)={0x8000, 0x0, 0x0, 0x0, {}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58) [ 224.528168][ T9500] loop4: detected capacity change from 0 to 512 [ 224.543035][ T9502] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 17 [ 224.560536][ T9500] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal 04:10:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000001240)={[{@norecovery}, {@journal_async_commit}]}) 04:10:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="66530700ae897094e7b1283000000000000000655ef5f0166391468f72e44a260f82e8a9bfc92b10559f1e4325268a957d16c8070a35b19cdb9631eeb3d3490f6b92c0f77bcbfd3141c3d6fd563431eaf1fa1b51f413e51552ec3f198c2c76958b380500f9901d6d81a692533af5d09a8acec090204ddc7c7e6ca68542887cd0bc9e28d1464a09e26f6479df4e1cb77024d93e692b8768f83930ece234fa822bb86ce7bcb7b924adc9ea91bbdb4677fd39e221070b17c44b92e5687645516b11bf809a163debfcaf006305b0f028e39758b46e5e5cafb644f29b", 0xda}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) tkill(r0, 0x21) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 04:10:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="3befff777aeb336371de2b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "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"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 04:10:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:10:18 executing program 0: clone3(&(0x7f0000000000)={0x8000, 0x0, 0x0, 0x0, {}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58) 04:10:18 executing program 1: unshare(0x400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\')(}\\*\x00', &(0x7f0000000f00)="1f", 0x1) [ 224.606012][ T9502] ext4_test_bit(bit=16, block=18) = 0 [ 224.611532][ T9502] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.636190][ T9535] loop4: detected capacity change from 0 to 512 [ 224.646117][ T9535] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal 04:10:18 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="66530700ae897094e7b1283000000000000000655ef5f0166391468f72e44a260f82e8a9bfc92b10559f1e4325268a957d16c8070a35b19cdb9631eeb3d3490f6b92c0f77bcbfd3141c3d6fd563431eaf1fa1b51f413e51552ec3f198c2c76958b380500f9901d6d81a692533af5d09a8acec090204ddc7c7e6ca68542887cd0bc9e28d1464a09e26f6479df4e1cb77024d93e692b8768f83930ece234fa822bb86ce7bcb7b924adc9ea91bbdb4677fd39e221070b17c44b92e5687645516b11bf809a163debfcaf006305b0f028e39758b46e5e5cafb644f29b", 0xda}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) tkill(r0, 0x21) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) 04:10:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e2f4655fe2f4655fe2f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="20000000b4253260b425326000000000e2f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bcc129100000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005f43fa2400000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3032353733363935382f66696c65302f66696c6530000000000000000000000000000000000000000000006561281700000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000eaaaeb6900000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) 04:10:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000001240)={[{@norecovery}, {@journal_async_commit}]}) 04:10:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x80, r1, 0x599, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0xe, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "7085052f221d81f0ce68e2bf010887be4206aa2ddc6ccf93ed7b6436be428ec02489ed8b4216e88c3344b25f4a41e68d66d4c5dad91974860a87d2c11a"}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "389ad8847f40de10b0c3f81cf0d358ea0cbea37995"}}]}]}, 0x80}}, 0x0) 04:10:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="3befff777aeb336371de2b"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "2a8d58b58822b68e696f6bbfa7f1e9251f9740e40ea66a060c7cf7c869dc875e729d1fec2467cbdbfdce29367c56a245aa1fd424fc9960874aca7cdfcfca1c1f76c5334a8b8afd0612d91a85f11fdb87a54daf4751f1ba9e2168cbc48448b0b41f7cf26f1a0af8d39d768a89944c8e5c03667fdf4b7a70b894c7436367166b8709b595a23eed0a38c0ba01604d64b53ae76c957f8fa705d14635edf833c60edac7550dcd7fe71847b0c595751db3b68948d3326736c0e18ff307d8ab42ac694b17111d1497c12d2130a90a528f1f4781cbd015585aae32940ed2b5a3a52f261e30d4a3d3a181f3e7a11133923a84f0b747c2b6de6afac3aa431afb45531f78999cfba6a838d87985cc8575f32a609b79699354784698a98d3dbbbf59cfc055f219ad2e03b28b4f435d7cceb2aa3fbdd50287578c2e1cb257b08395c82d263f86ec8a2162b8a78a7fc1761bf4ff6ecadb002f4ddf0b6e84af9eaeaf3ae5e1dc6587753a0ad063b17b15c10521c6ba8c0c05bb538574740a2a0ae81e5d894a49b89b6ea4da6cbc690c0086dc6e0dfb351949edf842a973cb9dad638e4c48be0cdbc5f612cbfd48b0eeb0fd139f9b3a85620b5886f31becc4fc5c92830831e9d768e0481127f6c29adc64c2724521e6c77cc81afa6f6b9d4061c44fdb3c618685544711b7aaeb1005c02213bcc5c105f11feadd99b1f951b1fb104ceb4ee8868cc27e7ee883250f1de80ad53c78d792700c1543674344118da43033257948bba7a2eda3dcaec0863fecc627e2d15129367a4121c8626ae97d757ac83fe09f85a448632bde1185b8ce496d3832deb7615b24b1418ef77dc8d03fc8afed1569f6c7f46958e4d502c1fcee1e0a6e562ccf06fbfdc85949b13a69bdf70c896ffd4d18ffaa25a878ec405007f8331f9ab32c8ff4d86f92a073cc44b4d67c65ac39291babdf7c3883cca67add76c8e97f6c2345b229753d63bcb8e7d2577cc297e74befa5defec7a1fe13bf6273e71c1754c045dace60275da2667b2ea3a826d95b8c6ed0325ebd385d76d5001bc5af29a017c16dc1dc914751f0e24cf5100cf08ccfdfb974f7ab1999129962c1a6c109029f10d495b1e61e44069f11efe3807f2440dd871d3258ff057132be4d3a85b4998f3d727203fb375df31a4dbf7bcb87017748674ee5f56ae45dd11f86ad5b79658f3dec0b1a0a490b48621164697d86fe2ffbf82057eac7d0f74d9cc53da2177505703188bed02b6eab4f39aadd643d1781c21fa82bcb0bd4007ec63ac6bf34afbb231b8602b2d7959f97018b8efc4cc1f3b27b7ef9d24a48fe4b052af271651a04051bda2c5c44f25156188c2603cf614888cd2764800ec66e33fc935d9d88527458f56132833c15093dc94a9144a6619d78e148723a931a0b737bb5801734d590a5b7be2aa066ac28138364a912f7e7adf38764d3a88f9001df924908b0a72b1231ea11faebc6055e0ef6f544aef3f2d907f01ca7d8dde1dee304d46228a166ecbda5a218a1c49d45d2f60d2977e73b1ee484842aade64862b33d617c418c8df2963245e897eebc9659e26c72fb4400f152bc6bf39e305929306de7a1e255186e3c103b879a2ed85d9b7ecfeab7ead21ca75dd4656c90b2ad9816618cafb5674efc0341718e35f55276f88f7aa75fba540387476513378f63e80539be6cb3ae1d1863bd0df14f13183d14b41707da5be2f96f73bf025e06ee3f7423fb7d2f9f6843859581ae3148302c2b091dcd9ad66b73021a0aaa707c661136fc6a2bf8d2f1915050db13ae605fc04af71b2c515ef03c8534f7ae6c0d26058a4b4e297e1a2d5f1cfca237654777d4370f0ca097f31ab710e9d99be9dac5c081dd115c03b338b3d65044057a445c0d87adfb3b842ed4bdf0036050ff3a7246eebcbc5217fefd8ca5611671fed72aaea84e6d6ccd5c6cab0b2af002300055f81a882e7bfde310c5e86d5212e236f83b205068200696f6f65a4294879fa00b1ce8b8559f507a0f8f1a61d09cca84cdfa58912c14b02db0b54ae936db7293c672fca6eaf40ceff7410ea251ae1f80f1754d6fb6446be3a91538baa7d4c14760b50252572f7de0cb13812d43eb700a5528e952873894b16187ecb1608c8332c7f666f1c9527c55fa86fa04cde13f0f14679cc5f9b7edec846c0f4a23265bacac65eb3d68804755630b17b1903ba1bd633f92b14e1d8bc6a3fa87817cb0fed47a736895ac94f30c4b0f18426c15b1f3188e0b1322b7bda02c19fc498bd82086b7d7c308c42f1014d48c7b1ba3c7fd274ef5aa98ceb439c5f184f0790aa50200b6bdf8b1fe1597e08e57bd0615b7088f0f4bee5f37216ed7eb00e290452ff3c11afc0f82790986f3539b9872e45824e473022912303cdb6f5e9413440fb6e52c380a5bd4d3b9a1a3c3e2fb3380259708eca8de6ea22ef4fd41b3ac0140820749b15f5dee510c5dd91fb951c055d6ad1ee2df85ec0a4202998729e8e69ad49d1da26b8976023ca0e3ad64c95d3f9581d5a8c085e098280cd15981ce5f180570a3f819a05a32ac650a05e72a1d3b733974e9c01a034543db294ed37fd6b4ef418ffdd8628d2e7ebcf30a298f082faef82e00a67d8562476b5e7f4e2a23eddd9217044e8b753e1b89ae327d6ad75d39387f4602cfde35158d015059c072ca10d5232dd941f8c24cce67240e8092b070ec79d5eecd04529608b2979f4096a2ff91cd4f9129ffbb3ad5a68ac1512695c0744fcfa2aa0abdfd385bb0449ff9c3e393972b61bee664473ad8fb04f62ab60e8d10dbe059c941a1150d4ece0dec36b025ed0107310ceaa01204c32a20ff1323b90084d1afc50e58a253cf7afce548f476b83bcb98da8b5abc1129a28bb88364596a17fbfdb58ab2695099f84d0039b1294848a56670d4a51704126724200e388562184588579f9d900f1f3da2d2f1fcba9a29ec127132c223a73dd000c3c224f997b7e72beac6c32f1d7af6daf095b2e1c025679846d7df9c65e57952f7042ceca67ea014842d2c070e1b42c78dfdb9e5e4e4313f385e7c6bf10d680b51ae6bcd3863bf8a90164d127261ac8ffd42ae4467ed3d83799946a254c2b0e2adac53f2aa5c5ba44bb779db01c0870bdcfeb5462b2792aa6e39ce120ce72c5f43c0c00be18cd5f98c9a9e0c2b5cec7d01cfb80e44cdd39257ded981a3650cd522a43e3f3439ef67692e5877fe04a5ba662f06e4d3fd935329ce954bf6ef68ede13d6cd9e9bb64ddc81666ca1ba63ce69a6f6891917573d0d16f2b562d33942cce25d1ba15f12613089ec9a259b7bf6964a2168137c17534d963fc76afc970fef7a89f1b9c79afd81cb4345cabd025b79a9760429c02405d2d2666a6dc824454198517888a80ab47306ee4b0f6e7b4d96bfc75cfe5bf1ffb463192360df6465f0200362dcfa4fe34857b3aa5bac48c3ebf40effacb11c54cb90ed2401c9cf1b4bfac3bdc450d6ac2e5c004a521a2edd3cf8a3e6bf7f9e7d1e36741280d7f2a5e681537358d2ef671df84c7d06365a89f295395e438bbcecebcd969053139dd7e2d71bc32e3329ad8e5ede78b1942a6a27722360b8fc562ef23a404ff02c055cb5026a356b476a79e112607f1fb3a8e62b0c4d003044b794a4110503fc61f9c669da8fc786c72cf3c11728439a5fc4080627e4abebc1d2333fea8b1cd6583d8be7c875b160508713b4331064f462ac55546ec1f585667118964777046854d5bde3afff1cb5a9700f6e7e090b73fd5d0448dcbaf5fd02fe71b1cd686e8c25d0bd4e8a382d7e82b48769ae3c2a1554b981851febad157bbb77067479fe1e28ac44f01e43a87b2b23caf127c3defbb1376e14a728dfb02aca5b09ac45d6a8a9bf5e4d8fb77e5ea980d6cfe0f6f50444f46b85c21fb1b1abf6e2ecf5cf0b8ddcb71f94d9421ce48f8455ee409ecdb67ddc9dbc0dcb6231f21b614712b8f3b4eca24534fcb15e067ea6aaea79c7f06c089cb32ca066dce7d462116d8e03813d92799d22271d0b290da4506e5e01c7b9cb29c9d3655b741464005261bebf4289eb1d16324a0be7ff7ac848c625720afd20b3e3fed836c2f14995c9a09d97cfc3faf17a693b3c60813ba44da9fcb428becc234f64da3908240cd67d1661236beead4019e695f86c451f743f0bae578dfa081c67076fe25b9995e5f22da975a726bc64990c0f019574a0693d3249ba44bb208425fe76126d689f30f69d679231a72ff67906761fa177cadf3d61f7f7453513f7560e14dcb5da50a93539e91457c468aaf48b8934ecac018f3f3aa0a01aa7c690a303a3d8eece00e44ff6cb749087758928888fcb9fb318ae39bd576d0b1de3b9df4de8d370cd94fbc4d15e9c58d85ebe83347013bfafd73b8009a9fb09b7981c7c326b856086d5ea901df4ee54eb57a31ca0ff2879b73e119ea1302760d6b445449855bab4d455a9ba7306657226f28d68e6590d921a5bb376ec111ca7837cd11c76b63b7cb548c0586eaf00a08ab8829d19e4a1cfdf50f0a7944ea4bdbba2a55631db41d42e1742b41986bb3de62793f43f8d2152ac20b99a353e0e6a19c301c907cdf486fbe5c8ff84a95e129990ee77c5ed82c816e8ae9f64a673063f04243f55c16c0cb4663c810aca56837b15d135d036425b388ed802e3660339bc7dea300467364a68577895b3b49ebe43541b80b1474c4419f1cbd577baaa7041cee39dcfa15f7bba7d73b7e6032e05b4cd32075ef567321a4e6bcbb5c84390adccba34454431d55b96ba1885d8a588d66ea7b145747869e00b3bc8e0acb2a4c2c7e55f1a7c516a7bc29f58a15a33ec5d79098a3149a3b1338af084344b06c17ab3b5aa194d25f5767c6d1104ef924a3a0d0a034393c1647a69993ea66076ca6bb48265f27558b623efa3625643813e98c8c8d7a03db3415ee66018e98b81a85e9a1b82dc6640129c41fa6a37cd0dd2551b3d7af4343e85c2a03372fc38d20ceeccd04341fef5b6d4fd65b500980261a37f1e0ad54e2da12c38a5482f6258408b877cd8a5b281ebf11e80f5bc590d29e61116f63f160caafac194badf7df959eec77a19f6c3b4b4e34ae8694d19fc51904847fa03ef52d74689bae5afed586329ac13302c3bbb3182b37395a4ca1007f958c135cd7a30ddd6ead5f4c925e35d5f7701bb552e63466ac45b2294654d4a1a4bf06deed60c04831a0c5cb00e6541d00758476314ba61463f5fd1d2c0a3df102936ea2a2d0cd5cca20c76cafff959e256793c6ec8f4483a6509a72394c552120ec123552aff1ff4457e44a28db467f2ee0d613d5af297a708a0e31f4efdb8aaec02f1dbda085a6e5fc8d67b4464814f3627b4313fa0e3ce8308a2120cd95cc57159fa27f3ced507d59509f3a545be1458c54fd627224bc86efcbecedaa03e781f8bac5"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) [ 224.739798][ T9548] loop1: detected capacity change from 0 to 4096 [ 224.764915][ T9552] loop5: detected capacity change from 0 to 264192 04:10:18 executing program 3: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="8ac141ac2afe9e44c9", 0x9}], 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 04:10:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x80, r1, 0x599, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0xe, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "7085052f221d81f0ce68e2bf010887be4206aa2ddc6ccf93ed7b6436be428ec02489ed8b4216e88c3344b25f4a41e68d66d4c5dad91974860a87d2c11a"}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "389ad8847f40de10b0c3f81cf0d358ea0cbea37995"}}]}]}, 0x80}}, 0x0) [ 224.800771][ T9552] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.809694][ T9548] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.821219][ T9552] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 224.835230][ T9552] EXT4-fs (loop5): Cannot turn on quotas: error -22 04:10:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x80, r1, 0x599, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0xe, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "7085052f221d81f0ce68e2bf010887be4206aa2ddc6ccf93ed7b6436be428ec02489ed8b4216e88c3344b25f4a41e68d66d4c5dad91974860a87d2c11a"}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "389ad8847f40de10b0c3f81cf0d358ea0cbea37995"}}]}]}, 0x80}}, 0x0) [ 224.871598][ T9559] loop4: detected capacity change from 0 to 512 [ 224.880058][ T9566] loop3: detected capacity change from 0 to 264192 04:10:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) [ 224.980293][ T9552] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 17 [ 224.999989][ T9559] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 225.013436][ T9552] ext4_test_bit(bit=16, block=18) = 0 [ 225.018827][ T9552] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:10:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:10:18 executing program 3: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="8ac141ac2afe9e44c9", 0x9}], 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 04:10:18 executing program 1: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 04:10:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x80, r1, 0x599, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0xe, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "7085052f221d81f0ce68e2bf010887be4206aa2ddc6ccf93ed7b6436be428ec02489ed8b4216e88c3344b25f4a41e68d66d4c5dad91974860a87d2c11a"}}, {0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "389ad8847f40de10b0c3f81cf0d358ea0cbea37995"}}]}]}, 0x80}}, 0x0) 04:10:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) 04:10:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000001240)={[{@norecovery}, {@journal_async_commit}]}) 04:10:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) 04:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) [ 225.103528][ T9579] loop3: detected capacity change from 0 to 264192 [ 225.142867][ T9585] loop4: detected capacity change from 0 to 512 04:10:18 executing program 1: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 04:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) [ 225.167296][ T9588] loop5: detected capacity change from 0 to 264192 [ 225.202934][ T9585] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal 04:10:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) 04:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) [ 225.220412][ T9588] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.231239][ T9588] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 225.245349][ T9588] EXT4-fs (loop5): Cannot turn on quotas: error -22 04:10:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x804055, &(0x7f00000000c0)) 04:10:19 executing program 1: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 04:10:19 executing program 3: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="8ac141ac2afe9e44c9", 0x9}], 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 04:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) 04:10:19 executing program 2: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) [ 225.262039][ T9588] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 17 [ 225.287133][ T9588] ext4_test_bit(bit=16, block=18) = 0 [ 225.292579][ T9588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:10:19 executing program 1: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 04:10:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0xfff}]) 04:10:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 04:10:19 executing program 2: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 04:10:19 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x95, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 225.355070][ T9604] loop3: detected capacity change from 0 to 264192 [ 225.373375][ T9609] loop4: detected capacity change from 0 to 15 [ 225.395110][ T9612] loop0: detected capacity change from 0 to 264192 04:10:19 executing program 3: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="8ac141ac2afe9e44c9", 0x9}], 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 04:10:19 executing program 2: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) [ 225.420373][ T9614] loop5: detected capacity change from 0 to 264192 [ 225.435066][ T9618] loop1: detected capacity change from 0 to 512 [ 225.450264][ T9618] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.465291][ T9618] ext4 filesystem being mounted at /root/syzkaller-testdir304862714/syzkaller.uEKs6M/413/file0 supports timestamps until 2038 (0x7fffffff) [ 225.482021][ T9614] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.485915][ T9623] loop3: detected capacity change from 0 to 264192 [ 225.500181][ T9614] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 225.514100][ T9614] EXT4-fs (loop5): Cannot turn on quotas: error -22 04:10:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 04:10:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) [ 225.539819][ T9614] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 17 [ 225.553411][ T9614] ext4_test_bit(bit=16, block=18) = 0 [ 225.558812][ T9614] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:10:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 04:10:19 executing program 5: pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1, 0xffffffffffffffff}) 04:10:19 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x95, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:10:19 executing program 3: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x4}) [ 225.612957][ T9627] loop0: detected capacity change from 0 to 264192 [ 225.622327][ T9630] loop2: detected capacity change from 0 to 264192 [ 225.638544][ T9634] loop1: detected capacity change from 0 to 512 04:10:19 executing program 4: r0 = memfd_secret(0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/201}, {&(0x7f0000000180)=""/48}, {&(0x7f00000001c0)=""/102}], 0x215) 04:10:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) [ 225.723253][ T9634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.741731][ T9634] ext4 filesystem being mounted at /root/syzkaller-testdir304862714/syzkaller.uEKs6M/414/file0 supports timestamps until 2038 (0x7fffffff) 04:10:19 executing program 5: pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1, 0xffffffffffffffff}) 04:10:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 04:10:19 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x95, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:10:19 executing program 3: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x4}) [ 225.749480][ T22] audit: type=1400 audit(1635307819.539:410): avc: denied { lock } for pid=9638 comm="syz-executor.3" path="socket:[31954]" dev="sockfs" ino=31954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 04:10:19 executing program 5: pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1, 0xffffffffffffffff}) 04:10:19 executing program 3: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x4}) 04:10:19 executing program 4: r0 = memfd_secret(0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/201}, {&(0x7f0000000180)=""/48}, {&(0x7f00000001c0)=""/102}], 0x215) 04:10:19 executing program 3: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x4}) 04:10:19 executing program 5: pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x1, 0xffffffffffffffff}) 04:10:19 executing program 4: r0 = memfd_secret(0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/201}, {&(0x7f0000000180)=""/48}, {&(0x7f00000001c0)=""/102}], 0x215) [ 225.869312][ T9657] loop2: detected capacity change from 0 to 264192 [ 225.872155][ T9645] loop0: detected capacity change from 0 to 264192 [ 225.889118][ T9661] loop1: detected capacity change from 0 to 512 04:10:19 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) 04:10:19 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 04:10:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) [ 225.934631][ T9661] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.968666][ T9661] ext4 filesystem being mounted at /root/syzkaller-testdir304862714/syzkaller.uEKs6M/415/file0 supports timestamps until 2038 (0x7fffffff) 04:10:19 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x95, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 04:10:19 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:19 executing program 4: r0 = memfd_secret(0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/201}, {&(0x7f0000000180)=""/48}, {&(0x7f00000001c0)=""/102}], 0x215) 04:10:19 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:19 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:19 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:19 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) [ 226.098939][ T9682] loop1: detected capacity change from 0 to 512 [ 226.114348][ T9686] loop2: detected capacity change from 0 to 264192 [ 226.134385][ T9682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 04:10:19 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) [ 226.148129][ T9682] ext4 filesystem being mounted at /root/syzkaller-testdir304862714/syzkaller.uEKs6M/416/file0 supports timestamps until 2038 (0x7fffffff) 04:10:20 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:20 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0x10c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x5) 04:10:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00\a9'], 0x60) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 04:10:20 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000280)='\xe1\xa5\xd4\x16\xd7\xeeX\xa7\x8fTY\x05\vG\xa0\xea1\xd38\xaax,\xc0\xdf\x95\x9d\xa7\v\xcc\x1d\xbc\xf5\xca\x87\x9d\n\r\x9f\xe1\xb3\x8d\\6\n\xe1\xbf\xed*', 0x2, 0x1a9, &(0x7f0000000040)={0x9, 0x10, 0xd, 0x10001}) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0xf) close(r3) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x2, 0x104, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0xf280}, {r0}, {r3, 0x40}, {r1, 0x540}, {r2, 0x400}, {0xffffffffffffffff, 0x4028}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2008]}, 0x8) 04:10:20 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:20 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:20 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00\a9'], 0x60) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 04:10:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0x10c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x5) 04:10:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00\a9'], 0x60) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 04:10:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0x10c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x5) 04:10:21 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00\a9'], 0x60) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 04:10:21 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:21 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:21 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) [ 227.453816][ C0] scsi_io_completion_action: 12 callbacks suppressed [ 227.453842][ C0] sd 0:0:1:0: tag#644 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 227.470353][ C0] sd 0:0:1:0: tag#644 CDB: opcode=0xe5 (vendor) [ 227.476587][ C0] sd 0:0:1:0: tag#644 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 227.485555][ C0] sd 0:0:1:0: tag#644 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 227.494513][ C0] sd 0:0:1:0: tag#644 CDB[20]: ba 04:10:21 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) [ 227.513165][ C0] sd 0:0:1:0: tag#653 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 227.522931][ C0] sd 0:0:1:0: tag#653 CDB: opcode=0xe5 (vendor) [ 227.529338][ C0] sd 0:0:1:0: tag#653 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 227.538315][ C0] sd 0:0:1:0: tag#653 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 227.547289][ C0] sd 0:0:1:0: tag#653 CDB[20]: ba [ 227.634332][ C1] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 227.644087][ C1] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 227.650437][ C1] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 227.659363][ C1] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 227.668309][ C1] sd 0:0:1:0: tag#673 CDB[20]: ba 04:10:21 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:21 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:22 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:22 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:22 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) [ 228.417949][ C0] sd 0:0:1:0: tag#678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 228.427708][ C0] sd 0:0:1:0: tag#678 CDB: opcode=0xe5 (vendor) [ 228.433970][ C0] sd 0:0:1:0: tag#678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 228.443018][ C0] sd 0:0:1:0: tag#678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 228.452316][ C0] sd 0:0:1:0: tag#678 CDB[20]: ba [ 228.515728][ C1] sd 0:0:1:0: tag#642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 228.526367][ C1] sd 0:0:1:0: tag#642 CDB: opcode=0xe5 (vendor) [ 228.532659][ C1] sd 0:0:1:0: tag#642 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 228.541623][ C1] sd 0:0:1:0: tag#642 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 228.550587][ C1] sd 0:0:1:0: tag#642 CDB[20]: ba 04:10:23 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="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", 0x10c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x5) 04:10:23 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03845a8b14f3585d87218200000000e7862e198d1148a3a4895b4bbc615f72283ac333d1e7b53e69398806743ea409cefcfa3f23857ffae83fac622ebfc469dedf287533f1eee641776c7429aecbbc8c413b35e0388a44c0a446f40da7219985262ad1778d2abb4077f00aa753302bef18a4d55c65a4bafd1921a09cc31dfcd74c1ef4e57e1dafc121e10aab926af5a837de0b272a39443fff0c92ab0b2c28ed"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xfe, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xf51}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x81, 0xff, 0x2, 0x5, 0x8, 0x1}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x90906766eb8c84fc, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000001351f3f4f56562807683203ba9e83b5e00d779501d80242f5e3385053706c8d56fce41e6f922d4d3082c1a24011b4875cc51d773c9a07a2e2554263f86c169c565cbd8108aac85460de28688bb689f5499604aa9135e81cb3e29382a07a578ccf535a96f61c7982b1762ef73cea8"], 0x76, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6) sendfile(r1, r3, 0x0, 0x80000001) 04:10:23 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:23 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:23 executing program 3: unshare(0x2000400) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:10:23 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, 0x0, 0x20000000) 04:10:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/6, 0x6}}], 0x1, 0x2, 0x0) [ 229.802988][ C0] sd 0:0:1:0: tag#640 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 229.812758][ C0] sd 0:0:1:0: tag#640 CDB: opcode=0xe5 (vendor) [ 229.819007][ C0] sd 0:0:1:0: tag#640 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 229.827965][ C0] sd 0:0:1:0: tag#640 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 229.836933][ C0] sd 0:0:1:0: tag#640 CDB[20]: ba 04:10:23 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, 0x0, 0x20000000) 04:10:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/6, 0x6}}], 0x1, 0x2, 0x0) 04:10:23 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, 0x0, 0x20000000) 04:10:23 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, 0x0, 0x20000000) 04:10:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/6, 0x6}}], 0x1, 0x2, 0x0) 04:10:26 executing program 4: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) clone(0xd8000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) 04:10:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4099, 0x1003}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80), 0x400010e, 0x0) 04:10:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/6, 0x6}}], 0x1, 0x2, 0x0) 04:10:26 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffd) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7f, 0x600002) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000005c0)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b6a, &(0x7f0000000600)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x6, 0xfffffeff}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x81, 0xd3, 0x4, 0xf, 0x8, "2266c37147b88184eb718a561f9f6aa1d82032", 0x4, 0x4}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 04:10:26 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) unlink(&(0x7f0000000140)='./bus\x00') io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) 04:10:26 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x7) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0, 0x0) [ 232.829060][ C1] sd 0:0:1:0: tag#670 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 232.829803][ T22] audit: type=1400 audit(1635307826.619:411): avc: denied { sys_admin } for pid=9813 comm="syz-executor.4" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 232.838821][ C1] sd 0:0:1:0: tag#670 CDB: opcode=0xe5 (vendor) [ 232.866396][ C1] sd 0:0:1:0: tag#670 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 04:10:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x20}, {0x35, 0x0, 0x0, 0x7fff}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 232.875480][ C1] sd 0:0:1:0: tag#670 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 232.884640][ C1] sd 0:0:1:0: tag#670 CDB[20]: ba [ 232.892740][ T9814] autofs4:pid:9814:autofs_fill_super: called with bogus options 04:10:26 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x7) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0, 0x0) 04:10:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_type(r0, &(0x7f0000000080), 0xfffffe58) [ 232.899845][ T9826] autofs4:pid:9826:autofs_fill_super: called with bogus options [ 232.965584][ C0] sd 0:0:1:0: tag#671 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 04:10:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x20}, {0x35, 0x0, 0x0, 0x7fff}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:26 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x7) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0, 0x0) [ 232.975418][ C0] sd 0:0:1:0: tag#671 CDB: opcode=0xe5 (vendor) [ 232.981698][ C0] sd 0:0:1:0: tag#671 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 232.990663][ C0] sd 0:0:1:0: tag#671 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 232.999599][ C0] sd 0:0:1:0: tag#671 CDB[20]: ba 04:10:26 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x7) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0, 0x0) 04:10:26 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffd) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7f, 0x600002) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000005c0)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b6a, &(0x7f0000000600)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x6, 0xfffffeff}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x81, 0xd3, 0x4, 0xf, 0x8, "2266c37147b88184eb718a561f9f6aa1d82032", 0x4, 0x4}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 04:10:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4099, 0x1003}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80), 0x400010e, 0x0) 04:10:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x20}, {0x35, 0x0, 0x0, 0x7fff}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 233.020294][ T9840] loop4: detected capacity change from 0 to 512 [ 233.082378][ T9840] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.082554][ C0] sd 0:0:1:0: tag#672 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.102831][ C0] sd 0:0:1:0: tag#672 CDB: opcode=0xe5 (vendor) [ 233.109432][ C0] sd 0:0:1:0: tag#672 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 233.118422][ C0] sd 0:0:1:0: tag#672 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 233.127388][ C0] sd 0:0:1:0: tag#672 CDB[20]: ba 04:10:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) [ 233.132727][ T22] audit: type=1400 audit(1635307826.899:412): avc: denied { create } for pid=9839 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.257735][ T9862] loop4: detected capacity change from 0 to 224 04:10:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:10:27 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x20}, {0x35, 0x0, 0x0, 0x7fff}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:27 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffd) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7f, 0x600002) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000005c0)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b6a, &(0x7f0000000600)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x6, 0xfffffeff}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x81, 0xd3, 0x4, 0xf, 0x8, "2266c37147b88184eb718a561f9f6aa1d82032", 0x4, 0x4}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 04:10:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4099, 0x1003}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80), 0x400010e, 0x0) 04:10:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 04:10:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) [ 233.428532][ T9872] loop4: detected capacity change from 0 to 224 [ 233.435191][ T22] audit: type=1400 audit(1635307827.229:413): avc: denied { read } for pid=9867 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 233.455995][ C0] sd 0:0:1:0: tag#675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.465886][ C0] sd 0:0:1:0: tag#675 CDB: opcode=0xe5 (vendor) 04:10:27 executing program 2: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0xfffffffffffffffd) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7f, 0x600002) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x3, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000005c0)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b6a, &(0x7f0000000600)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000080)={0x6, 0xfffffeff}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x81, 0xd3, 0x4, 0xf, 0x8, "2266c37147b88184eb718a561f9f6aa1d82032", 0x4, 0x4}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 04:10:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4099, 0x1003}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80), 0x400010e, 0x0) [ 233.472159][ C0] sd 0:0:1:0: tag#675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 233.481125][ C0] sd 0:0:1:0: tag#675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 233.490128][ C0] sd 0:0:1:0: tag#675 CDB[20]: ba [ 233.508464][ T9874] loop0: detected capacity change from 0 to 224 04:10:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 04:10:27 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x3, 0x0) [ 233.543104][ C1] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.552982][ C1] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 233.559322][ C1] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 233.568593][ C1] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 233.577572][ C1] sd 0:0:1:0: tag#676 CDB[20]: ba 04:10:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:10:27 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x3, 0x0) 04:10:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:10:27 executing program 2: syslog(0x3, &(0x7f0000000080)=""/180, 0x20000160) 04:10:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 233.649549][ T9886] loop0: detected capacity change from 0 to 224 04:10:27 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x3, 0x0) 04:10:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:10:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*]*:\x00'}]}, 0x20}}, 0x0) 04:10:27 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 233.691494][ T9893] loop4: detected capacity change from 0 to 224 04:10:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xe000}], 0x0, &(0x7f0000000140)=ANY=[]) getxattr(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:10:27 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x3, 0x0) 04:10:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*]*:\x00'}]}, 0x20}}, 0x0) 04:10:27 executing program 1: mmap$perf(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0) [ 233.770115][ T9904] loop0: detected capacity change from 0 to 224 04:10:27 executing program 1: mmap$perf(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 233.821680][ T9910] loop4: detected capacity change from 0 to 224 04:10:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000002c0)={'sit0\x00', 0x0}) 04:10:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 04:10:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*]*:\x00'}]}, 0x20}}, 0x0) 04:10:27 executing program 1: mmap$perf(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x201, 0x400}, {0x0}], 0x0, &(0x7f0000000080)) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 04:10:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*]*:\x00'}]}, 0x20}}, 0x0) [ 233.963084][ T9925] loop4: detected capacity change from 0 to 4 [ 233.990465][ T9925] EXT4-fs (loop4): Unrecognized mount option "n" or missing value [ 233.998349][ T9925] EXT4-fs (loop4): failed to parse options in superblock: n 04:10:27 executing program 1: mmap$perf(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000002c0)={'sit0\x00', 0x0}) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 04:10:27 executing program 1: syz_read_part_table(0xffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000680)=[{&(0x7f00000000c0)="699fe6ce419011f9a87e0429c79a6a5e3916112237f7e378903c5eabc414922657c515fd51c897f7a862ab106ef3dc8f6eb8e6ea012f2dde02194c347774b280bf927779dfc4c47dbe72115262a0bdc889e9a023673c91158f728e403a481d169512b4", 0x63}, {&(0x7f0000000200)="8f", 0x1, 0x81}, {&(0x7f0000000300)="4f09834145", 0x5, 0xb2d}, {&(0x7f00000003c0)="59c5f3b79e7d33ac5a205ccf8834cbe105963c91648d1912b0f00a00429410c3cc8401e880e09294adbb7777203862f36fc8e169355ab11ad11d3a729a7fe6101347d42d5cd1856476d1cc1972255f8708f4dbef83f10506404a646268eb1f00da4c5b41f2e6d22de9dac74e279099beaf7fe55024efb970c731e0023d681baa1a6ba247eaeb06340bcda1979dfa7235e1de4c04cb92c246", 0x98}]) syz_read_part_table(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000b00)={0x7}, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x46) [ 234.005745][ T9925] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (beea0000) 04:10:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000004900071f8a092504090007000a040000000000000000e293210001c000000000000000000000ffff0000000000001ec28656aaa79bf87c5d27aa2f029f000200000300f92fbe780196370d1151ffd633d4b40c03c1ad54325950000000e5d18064b1ed548d59c40a366c57c6a55e00000100d073023c817073d9ad68731a3e2e80772c05defd5a32e280fc83ab820f06f70cce190a60aa47e98839971592064e763b6f380f6dd92c83170e5bba4a463a1e00566f91cfded815b2ccd243f2564ea45b41577d2c95ed94e0ad91bd0734babc7c737de583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0454e", 0xfc) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 234.068164][ T9940] loop1: detected capacity change from 0 to 264192 [ 234.076751][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 234.078529][ T9925] loop4: detected capacity change from 0 to 4 [ 234.116573][ T9925] EXT4-fs (loop4): Unrecognized mount option "n" or missing value [ 234.124818][ T9925] EXT4-fs (loop4): failed to parse options in superblock: n [ 234.132202][ T9925] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (beea0000) [ 234.142685][ T5986] ================================================================== [ 234.150881][ T5986] BUG: KCSAN: data-race in __submit_bio / blk_mq_unfreeze_queue [ 234.158619][ T5986] [ 234.160965][ T5986] write to 0xffff888101d2d5f4 of 4 bytes by task 9940 on cpu 1: [ 234.168852][ T5986] blk_mq_unfreeze_queue+0x3c/0xc0 [ 234.174042][ T5986] loop_set_status+0x43e/0x5a0 [ 234.178815][ T5986] lo_ioctl+0x82c/0x13e0 [ 234.183048][ T5986] blkdev_ioctl+0x1d0/0x3f0 [ 234.187555][ T5986] block_ioctl+0x6e/0x80 [ 234.191804][ T5986] __se_sys_ioctl+0xcb/0x140 [ 234.196381][ T5986] __x64_sys_ioctl+0x3f/0x50 [ 234.200962][ T5986] do_syscall_64+0x44/0xa0 [ 234.205370][ T5986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.211253][ T5986] [ 234.213563][ T5986] read to 0xffff888101d2d5f4 of 4 bytes by task 5986 on cpu 0: [ 234.221110][ T5986] __submit_bio+0x168/0x480 [ 234.225620][ T5986] submit_bio_noacct+0x46d/0x530 [ 234.230550][ T5986] submit_bio+0x10c/0x190 [ 234.234871][ T5986] mpage_readahead+0x23e/0x280 [ 234.239622][ T5986] blkdev_readahead+0x18/0x20 [ 234.244287][ T5986] read_pages+0xb6/0x540 [ 234.248517][ T5986] page_cache_ra_unbounded+0x3d2/0x430 [ 234.253989][ T5986] force_page_cache_ra+0x256/0x290 [ 234.259090][ T5986] page_cache_sync_ra+0xcc/0xe0 [ 234.264021][ T5986] filemap_read+0x3ad/0x1220 [ 234.268601][ T5986] generic_file_read_iter+0x75/0x2c0 [ 234.273896][ T5986] blkdev_read_iter+0xb9/0xf0 [ 234.278561][ T5986] vfs_read+0x66c/0x750 [ 234.282723][ T5986] ksys_read+0xd9/0x190 [ 234.286885][ T5986] __x64_sys_read+0x3e/0x50 [ 234.291582][ T5986] do_syscall_64+0x44/0xa0 [ 234.296014][ T5986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.301918][ T5986] [ 234.304226][ T5986] value changed: 0x00000001 -> 0x00000000 [ 234.310014][ T5986] [ 234.312324][ T5986] Reported by Kernel Concurrency Sanitizer on: [ 234.318454][ T5986] CPU: 0 PID: 5986 Comm: udevd Not tainted 5.15.0-rc7-syzkaller #0 [ 234.326354][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.336396][ T5986] ================================================================== 04:10:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 04:10:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000002c0)={'sit0\x00', 0x0}) 04:10:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:10:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/121, 0x79}], 0x1, 0x7f, 0x0) 04:10:28 executing program 1: syz_read_part_table(0xffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000680)=[{&(0x7f00000000c0)="699fe6ce419011f9a87e0429c79a6a5e3916112237f7e378903c5eabc414922657c515fd51c897f7a862ab106ef3dc8f6eb8e6ea012f2dde02194c347774b280bf927779dfc4c47dbe72115262a0bdc889e9a023673c91158f728e403a481d169512b4", 0x63}, {&(0x7f0000000200)="8f", 0x1, 0x81}, {&(0x7f0000000300)="4f09834145", 0x5, 0xb2d}, {&(0x7f00000003c0)="59c5f3b79e7d33ac5a205ccf8834cbe105963c91648d1912b0f00a00429410c3cc8401e880e09294adbb7777203862f36fc8e169355ab11ad11d3a729a7fe6101347d42d5cd1856476d1cc1972255f8708f4dbef83f10506404a646268eb1f00da4c5b41f2e6d22de9dac74e279099beaf7fe55024efb970c731e0023d681baa1a6ba247eaeb06340bcda1979dfa7235e1de4c04cb92c246", 0x98}]) syz_read_part_table(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000b00)={0x7}, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x46) 04:10:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000001c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203ebbe890d616a66dc68ca49d6564a0dc9a03f8557bd0b9ff4496bce5764b88dd1723b315d65c3f1237e880e023a888627bea542fc5edfe4f5ce442f0c99404a8940e1805733770439cd3418a182497706607f5438adcf491648f65bd118baed4f13d4d87739c8ac06c08df50ea18eca8f075255fd0b774803705fa1102a1259bc7b6dfd674f7da1d18c94289e8217b47b06fe80b2e7058dc584f2102a1ff7f6b6cb9dad389c40e724b880072ddff4660589e4aa3a507d2f7caadbb976ddf25c620da15d31bc6212f8d55caec4d058efe9c6a01c0e0103e1ac82cc39ceee94cbef88cae91440d19f3662ddd04cde0baa64409ed2934d7f799499905098487a35584c4c5a1455120b1d7cf73085e19459f2a74c6ca02e9b5947b7d9ac0a48b188fe5c2a3a3a2dbf6fbd7c3409be269419c7b6951dbf2980365fd8c4194357d3e40a2676fdb8cab4c1763a23465c37d88bb6dce7c2bc55d681b3206796e7a66fef70d483a47cd4bdebd8c34c676a0fd28cf5454bf917a2ca5c65d84d0076f606e86d815e8708e0133385e32b233511d484a89f609fdadc2c9267a1096e", 0x201, 0x400}, {0x0}], 0x0, &(0x7f0000000080)) 04:10:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000002c0)={'sit0\x00', 0x0}) [ 234.818174][ T9951] loop1: detected capacity change from 0 to 264192 [ 234.825838][ T9956] loop4: detected capacity change from 0 to 4 [ 234.832290][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 234.852572][ T9956] EXT4-fs (loop4): Unrecognized mount option "n" or missing value [ 234.860467][ T9956] EXT4-fs (loop4): failed to parse options in superblock: n 04:10:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000004900071f8a092504090007000a040000000000000000e293210001c000000000000000000000ffff0000000000001ec28656aaa79bf87c5d27aa2f029f000200000300f92fbe780196370d1151ffd633d4b40c03c1ad54325950000000e5d18064b1ed548d59c40a366c57c6a55e00000100d073023c817073d9ad68731a3e2e80772c05defd5a32e280fc83ab820f06f70cce190a60aa47e98839971592064e763b6f380f6dd92c83170e5bba4a463a1e00566f91cfded815b2ccd243f2564ea45b41577d2c95ed94e0ad91bd0734babc7c737de583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0454e", 0xfc) 04:10:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="676a000000000000c910fe8000000000000000000000000000aa07a1a71bb92c98"], 0x360) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 04:10:28 executing program 1: syz_read_part_table(0xffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000680)=[{&(0x7f00000000c0)="699fe6ce419011f9a87e0429c79a6a5e3916112237f7e378903c5eabc414922657c515fd51c897f7a862ab106ef3dc8f6eb8e6ea012f2dde02194c347774b280bf927779dfc4c47dbe72115262a0bdc889e9a023673c91158f728e403a481d169512b4", 0x63}, {&(0x7f0000000200)="8f", 0x1, 0x81}, {&(0x7f0000000300)="4f09834145", 0x5, 0xb2d}, {&(0x7f00000003c0)="59c5f3b79e7d33ac5a205ccf8834cbe105963c91648d1912b0f00a00429410c3cc8401e880e09294adbb7777203862f36fc8e169355ab11ad11d3a729a7fe6101347d42d5cd1856476d1cc1972255f8708f4dbef83f10506404a646268eb1f00da4c5b41f2e6d22de9dac74e279099beaf7fe55024efb970c731e0023d681baa1a6ba247eaeb06340bcda1979dfa7235e1de4c04cb92c246", 0x98}]) syz_read_part_table(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000b00)={0x7}, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x46) 04:10:28 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_getscheduler(r0) [ 234.867752][ T9956] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (beea0000) [ 234.892304][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 04:10:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="676a000000000000c910fe8000000000000000000000000000aa07a1a71bb92c98"], 0x360) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 234.931526][ T22] audit: type=1326 audit(1635307828.729:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 234.955904][ T22] audit: type=1326 audit(1635307828.729:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 234.979880][ T22] audit: type=1326 audit(1635307828.729:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 235.003871][ T22] audit: type=1326 audit(1635307828.729:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 235.027683][ T22] audit: type=1326 audit(1635307828.729:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 235.052122][ T22] audit: type=1326 audit(1635307828.729:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 235.076289][ T22] audit: type=1326 audit(1635307828.729:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9968 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x7ffc0000 [ 235.116665][ T9975] loop1: detected capacity change from 0 to 264192 04:10:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 04:10:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 04:10:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x201, 0x400}, {0x0}], 0x0, &(0x7f0000000080)) 04:10:29 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_getscheduler(r0) 04:10:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="676a000000000000c910fe8000000000000000000000000000aa07a1a71bb92c98"], 0x360) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 04:10:29 executing program 1: syz_read_part_table(0xffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000680)=[{&(0x7f00000000c0)="699fe6ce419011f9a87e0429c79a6a5e3916112237f7e378903c5eabc414922657c515fd51c897f7a862ab106ef3dc8f6eb8e6ea012f2dde02194c347774b280bf927779dfc4c47dbe72115262a0bdc889e9a023673c91158f728e403a481d169512b4", 0x63}, {&(0x7f0000000200)="8f", 0x1, 0x81}, {&(0x7f0000000300)="4f09834145", 0x5, 0xb2d}, {&(0x7f00000003c0)="59c5f3b79e7d33ac5a205ccf8834cbe105963c91648d1912b0f00a00429410c3cc8401e880e09294adbb7777203862f36fc8e169355ab11ad11d3a729a7fe6101347d42d5cd1856476d1cc1972255f8708f4dbef83f10506404a646268eb1f00da4c5b41f2e6d22de9dac74e279099beaf7fe55024efb970c731e0023d681baa1a6ba247eaeb06340bcda1979dfa7235e1de4c04cb92c246", 0x98}]) syz_read_part_table(0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000b00)={0x7}, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x46) [ 235.697852][ T9980] loop1: detected capacity change from 0 to 264192 [ 235.698437][ T9981] loop4: detected capacity change from 0 to 4 [ 235.713727][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 235.724642][ T9981] EXT4-fs (loop4): Unrecognized mount option "n" or missing value [ 235.732603][ T9981] EXT4-fs (loop4): failed to parse options in superblock: n 04:10:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="676a000000000000c910fe8000000000000000000000000000aa07a1a71bb92c98"], 0x360) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 04:10:29 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_getscheduler(r0) 04:10:29 executing program 0: r0 = syz_io_uring_setup(0x7fe5, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 04:10:29 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 235.739901][ T9981] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (beea0000) 04:10:29 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_getscheduler(r0) 04:10:29 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 04:10:30 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:30 executing program 2: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='7', 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x5) 04:10:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000001c0)="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", 0x201, 0x400}, {0x0}], 0x0, &(0x7f0000000080)) 04:10:30 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:30 executing program 0: r0 = syz_io_uring_setup(0x7fe5, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 04:10:30 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:30 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18}}], 0x40}}], 0x1, 0x0) [ 236.572473][T10009] loop4: detected capacity change from 0 to 4 [ 236.587079][T10009] EXT4-fs (loop4): Unrecognized mount option "n" or missing value [ 236.594938][T10009] EXT4-fs (loop4): failed to parse options in superblock: n [ 236.602343][T10009] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (beea0000) 04:10:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18}}], 0x40}}], 0x1, 0x0) 04:10:30 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', ']\x00'}) 04:10:30 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:10:31 executing program 0: r0 = syz_io_uring_setup(0x7fe5, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 04:10:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x2, 0x0) 04:10:31 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', ']\x00'}) 04:10:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18}}], 0x40}}], 0x1, 0x0) 04:10:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x8}, {0x25}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:10:31 executing program 3: ioprio_get$uid(0x2, 0xee00) 04:10:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18}}], 0x40}}], 0x1, 0x0) 04:10:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006e80), 0x41, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x40043311) 04:10:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x2, 0x0) 04:10:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x8}, {0x25}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:10:31 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', ']\x00'}) 04:10:31 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', ']\x00'}) 04:10:31 executing program 0: r0 = syz_io_uring_setup(0x7fe5, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 04:10:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x8}, {0x25}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:10:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x2, 0x0) 04:10:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54}, {0x15}, {0x6}]}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) 04:10:31 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='Q']) 04:10:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006e80), 0x41, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x40043311) 04:10:31 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='Q']) 04:10:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/88, 0x58}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x2, 0x0) 04:10:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0x8}, {0x25}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 04:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f0000009400)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000091c0)=[{{&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/25, 0x19}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2060, &(0x7f0000009440)={0x0, r1+10000000}) 04:10:31 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='Q']) 04:10:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:10:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:10:31 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x75) 04:10:31 executing program 5: clone(0x80910b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x189422) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='Q']) 04:10:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="1c0000001a00110214f9f4072a090400110000000002000000020000", 0x1c) 04:10:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006e80), 0x41, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x40043311) 04:10:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54}, {0x15}, {0x6}]}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) 04:10:32 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x75) 04:10:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:10:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) [ 238.534490][ T22] kauditd_printk_skb: 33 callbacks suppressed [ 238.534498][ T22] audit: type=1326 audit(1635307832.329:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:10:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:10:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 04:10:32 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x75) 04:10:32 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f00009b3000)) mlock(&(0x7f0000007000/0x1000)=nil, 0x1000) [ 238.639219][ T22] audit: type=1326 audit(1635307832.429:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 04:10:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 04:10:32 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f00009b3000)) mlock(&(0x7f0000007000/0x1000)=nil, 0x1000) 04:10:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006e80), 0x41, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x40043311) 04:10:32 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28132, 0xffffffffffffffff, 0x3000) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3beb, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54}, {0x15}, {0x6}]}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) 04:10:33 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x75) 04:10:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 04:10:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28132, 0xffffffffffffffff, 0x3000) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3beb, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:33 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f00009b3000)) mlock(&(0x7f0000007000/0x1000)=nil, 0x1000) 04:10:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x58}) 04:10:33 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f00009b3000)) mlock(&(0x7f0000007000/0x1000)=nil, 0x1000) 04:10:33 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001840), 0x3, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 04:10:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x200) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) 04:10:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000f00)=""/43, 0x2b) getdents64(r0, 0x0, 0x18) 04:10:33 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28132, 0xffffffffffffffff, 0x3000) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3beb, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x58}) [ 239.514966][T10139] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.515198][ T22] audit: type=1326 audit(1635307833.309:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 [ 239.589994][T10152] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54}, {0x15}, {0x6}]}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) 04:10:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001840), 0x3, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 04:10:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000f00)=""/43, 0x2b) getdents64(r0, 0x0, 0x18) 04:10:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x200) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) 04:10:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x58}) 04:10:34 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28132, 0xffffffffffffffff, 0x3000) syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3beb, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000f00)=""/43, 0x2b) getdents64(r0, 0x0, 0x18) 04:10:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001840), 0x3, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 04:10:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x200) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) 04:10:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001840), 0x3, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 240.378564][ T22] audit: type=1326 audit(1635307834.169:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ff550a39 code=0x0 [ 240.384267][T10165] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000f00)=""/43, 0x2b) getdents64(r0, 0x0, 0x18) 04:10:34 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[@ANYRES32], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 04:10:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) 04:10:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x200) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) 04:10:35 executing program 4: r0 = syz_io_uring_setup(0x82, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x1, 0x805, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1}, 0x1236) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:10:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x58}) 04:10:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[@ANYRES32], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 04:10:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x42, 0x0, &(0x7f0000000000)) 04:10:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) 04:10:35 executing program 4: r0 = syz_io_uring_setup(0x82, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x1, 0x805, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1}, 0x1236) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 241.233038][T10191] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 04:10:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000c00), 0x4) 04:10:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x42, 0x0, &(0x7f0000000000)) 04:10:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000c00), 0x4) 04:10:35 executing program 4: r0 = syz_io_uring_setup(0x82, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x1, 0x805, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1}, 0x1236) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:10:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[@ANYRES32], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 04:10:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) 04:10:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x42, 0x0, &(0x7f0000000000)) 04:10:35 executing program 4: r0 = syz_io_uring_setup(0x82, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x1, 0x805, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1}, 0x1236) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 04:10:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) 04:10:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000c00), 0x4) 04:10:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x42, 0x0, &(0x7f0000000000)) 04:10:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 04:10:35 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{}, {@memory_localevents}]}) 04:10:35 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) io_destroy(r0) 04:10:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000c00), 0x4) 04:10:35 executing program 2: unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 04:10:35 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[@ANYRES32], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, 0x0, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 04:10:35 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{}, {@memory_localevents}]}) 04:10:35 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000048fc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004a1c0)={0x0, ""/256, 0x0}) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r4, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r3}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r4, r5}, {r3}, {}, {}, {r3}, {}, {}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {r3, r5}, {}, {}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3}, {r4, r5}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {}, {}, {}, {r3}, {}, {0x0, r5}, {r1}, {r4}, {r4}, {}, {}, {r4}, {}, {}, {}, {}, {r4, r5}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000048fc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x4000000000010046) 04:10:35 executing program 2: unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 04:10:35 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{}, {@memory_localevents}]}) 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x125d, &(0x7f0000006840)) 04:10:35 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{}, {@memory_localevents}]}) [ 241.589822][ T22] audit: type=1400 audit(1635307835.379:458): avc: denied { view } for pid=10245 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 04:10:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 04:10:35 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x150) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005f180)={0x0, [], 0x40, "2f900797885f39"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001e40)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000001d00)={0x129, 0x7, 0x2, {0x120, '\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140x0}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000d00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x2, "c618147ed5ecf1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) close(0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[0x0], 0x0) 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x125d, &(0x7f0000006840)) 04:10:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 04:10:35 executing program 2: unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x3}, {0x54}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x3}, {0x54}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x125d, &(0x7f0000006840)) 04:10:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 241.771246][ C1] sd 0:0:1:0: tag#645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 241.781099][ C1] sd 0:0:1:0: tag#645 CDB: opcode=0xe5 (vendor) [ 241.787342][ C1] sd 0:0:1:0: tag#645 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 241.796300][ C1] sd 0:0:1:0: tag#645 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 241.805282][ C1] sd 0:0:1:0: tag#645 CDB[20]: ba 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000a40), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x125d, &(0x7f0000006840)) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x3}, {0x54}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 04:10:35 executing program 2: unshare(0x62000200) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1fffffffffff7ff0000000000000002000000020000007f000001000000000000000000000000000000200000000000000000000000000000000000000000000000001d000000000000000000000000cc15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 241.841819][ C0] sd 0:0:1:0: tag#646 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 241.851805][ C0] sd 0:0:1:0: tag#646 CDB: opcode=0xe5 (vendor) [ 241.858064][ C0] sd 0:0:1:0: tag#646 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 241.867530][ C0] sd 0:0:1:0: tag#646 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 241.876491][ C0] sd 0:0:1:0: tag#646 CDB[20]: ba 04:10:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0xffffffffffffff7f, 0x0, 0x0, 0x10368a14f61da9bd) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 04:10:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 04:10:35 executing program 3: clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x3}, {0x54}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x4082) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) 04:10:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 04:10:35 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 241.980015][ T22] audit: type=1400 audit(1635307835.779:459): avc: denied { wake_alarm } for pid=10287 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 04:10:35 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/51) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x20}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x4082) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) 04:10:35 executing program 3: clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x20}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x20}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x4082) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) 04:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 04:10:35 executing program 3: clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 04:10:35 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/51) 04:10:35 executing program 0: futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 04:10:36 executing program 3: clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 04:10:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x4082) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) 04:10:36 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/51) 04:10:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x25}, {0x20}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:10:36 executing program 0: futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:36 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/51) 04:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 04:10:36 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @rumble}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) 04:10:36 executing program 3: unshare(0x28000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x841, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 04:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 04:10:36 executing program 0: futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:36 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @rumble}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) 04:10:36 executing program 3: unshare(0x28000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x841, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 04:10:36 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="24000000180003043efffd946f610500020c010a1f05fe060c10080008000400ff00c00e", 0x24}], 0x1}, 0x0) 04:10:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 04:10:36 executing program 0: futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) 04:10:36 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @rumble}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) 04:10:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 04:10:36 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="24000000180003043efffd946f610500020c010a1f05fe060c10080008000400ff00c00e", 0x24}], 0x1}, 0x0) 04:10:36 executing program 3: unshare(0x28000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x841, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 04:10:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800090002000000", 0x24) 04:10:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800090002000000", 0x24) 04:10:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="24000000180003043efffd946f610500020c010a1f05fe060c10080008000400ff00c00e", 0x24}], 0x1}, 0x0) 04:10:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 04:10:37 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @rumble}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) 04:10:37 executing program 3: unshare(0x28000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x841, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800090002000000", 0x24) 04:10:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000002000000000000000800090002000000", 0x24) 04:10:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0, 0x0) 04:10:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3}, {0x4c}, {0x6}]}, 0x10) r2 = dup(r0) sendmmsg(r2, &(0x7f0000002240), 0x1, 0x0) 04:10:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002740), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 04:10:37 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="24000000180003043efffd946f610500020c010a1f05fe060c10080008000400ff00c00e", 0x24}], 0x1}, 0x0) 04:10:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0, 0x0)