DUID 00:04:92:3d:a4:bf:d8:99:95:1d:d2:9f:0e:34:7d:20:a7:e6 forked to background, child pid 3182 [ 41.107978][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.120570][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.70' (ECDSA) to the list of known hosts. 2021/12/14 00:31:14 fuzzer started 2021/12/14 00:31:14 dialing manager at 10.128.0.169:46529 syzkaller login: [ 64.399432][ T3604] cgroup: Unknown subsys name 'net' [ 64.532478][ T3604] cgroup: Unknown subsys name 'rlimit' 2021/12/14 00:31:15 syscalls: 3639 2021/12/14 00:31:15 code coverage: enabled 2021/12/14 00:31:15 comparison tracing: enabled 2021/12/14 00:31:15 extra coverage: enabled 2021/12/14 00:31:15 delay kcov mmap: mmap returned an invalid pointer 2021/12/14 00:31:15 setuid sandbox: enabled 2021/12/14 00:31:15 namespace sandbox: enabled 2021/12/14 00:31:15 Android sandbox: /sys/fs/selinux/policy does not exist 2021/12/14 00:31:15 fault injection: enabled 2021/12/14 00:31:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/12/14 00:31:15 net packet injection: enabled 2021/12/14 00:31:15 net device setup: enabled 2021/12/14 00:31:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/12/14 00:31:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/12/14 00:31:15 USB emulation: enabled 2021/12/14 00:31:15 hci packet injection: enabled 2021/12/14 00:31:15 wifi device emulation: enabled 2021/12/14 00:31:15 802.15.4 emulation: enabled 2021/12/14 00:31:15 fetching corpus: 0, signal 0/2000 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50243 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50392 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50512 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50670 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50821 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/50968 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51098 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51268 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51416 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51570 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51694 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/51860 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52004 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52153 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52292 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52445 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52590 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52735 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/52891 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49937/53042 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49975/53187 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49975/53336 (executing program) 2021/12/14 00:31:15 fetching corpus: 42, signal 49975/53483 (executing program) 2021/12/14 00:31:15 fetching corpus: 43, signal 50009/53679 (executing program) 2021/12/14 00:31:15 fetching corpus: 43, signal 50009/53811 (executing program) 2021/12/14 00:31:15 fetching corpus: 43, signal 50009/53943 (executing program) 2021/12/14 00:31:15 fetching corpus: 43, signal 50009/53943 (executing program) 2021/12/14 00:31:17 starting 6 fuzzer processes 00:31:17 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) 00:31:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:17 executing program 2: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:17 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:17 executing program 4: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:17 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 67.854813][ T3621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.863031][ T3621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.870803][ T3621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.878533][ T3621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.886107][ T3621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.893425][ T3621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.990358][ T3631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.999146][ T3631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.006997][ T3631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.014501][ T3631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.022450][ T3631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.030641][ T3631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.038028][ T3631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.038282][ T3613] chnl_net:caif_netlink_parms(): no params data found [ 68.045268][ T3631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.059522][ T3631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.066843][ T3631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.073941][ T3631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.081254][ T3631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.090555][ T3631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.091285][ T3632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.098040][ T3631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.105352][ T3632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.112160][ T3631] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.118836][ T3632] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.125742][ T3631] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.132945][ T3632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.139674][ T3631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.146681][ T3632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.161916][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.170427][ T3632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.255189][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.263109][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.271960][ T3613] device bridge_slave_0 entered promiscuous mode [ 68.280964][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.289404][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.297235][ T3613] device bridge_slave_1 entered promiscuous mode [ 68.368149][ T3613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.381505][ T3613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.445464][ T3613] team0: Port device team_slave_0 added [ 68.455589][ T3613] team0: Port device team_slave_1 added [ 68.481963][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.489047][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.515175][ T3613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.540696][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.548423][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.574944][ T3613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.646079][ T3613] device hsr_slave_0 entered promiscuous mode [ 68.653145][ T3613] device hsr_slave_1 entered promiscuous mode [ 68.668678][ T3618] chnl_net:caif_netlink_parms(): no params data found [ 68.779958][ T3616] chnl_net:caif_netlink_parms(): no params data found [ 68.808728][ T3617] chnl_net:caif_netlink_parms(): no params data found [ 68.861169][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.868529][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.876139][ T3618] device bridge_slave_0 entered promiscuous mode [ 68.894062][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.901201][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.909576][ T3618] device bridge_slave_1 entered promiscuous mode [ 68.931093][ T3615] chnl_net:caif_netlink_parms(): no params data found [ 68.973131][ T3618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.990899][ T3618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.067839][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.074896][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.083346][ T3616] device bridge_slave_0 entered promiscuous mode [ 69.092739][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.100052][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.108423][ T3616] device bridge_slave_1 entered promiscuous mode [ 69.144682][ T3618] team0: Port device team_slave_0 added [ 69.171962][ T3616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.181213][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.188417][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.196100][ T3617] device bridge_slave_0 entered promiscuous mode [ 69.214830][ T3618] team0: Port device team_slave_1 added [ 69.240513][ T3616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.249756][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.256894][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.264537][ T3617] device bridge_slave_1 entered promiscuous mode [ 69.277942][ T3618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.286105][ T3618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.313266][ T3618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.361262][ T3618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.368354][ T3618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.394379][ T3618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.423930][ T3617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.433215][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.440730][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.441745][ T3615] device bridge_slave_0 entered promiscuous mode [ 69.457289][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.464354][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.472863][ T3615] device bridge_slave_1 entered promiscuous mode [ 69.482479][ T3616] team0: Port device team_slave_0 added [ 69.488913][ T3613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.501161][ T3617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.529730][ T3616] team0: Port device team_slave_1 added [ 69.542943][ T3613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.595449][ T3613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.612978][ T3617] team0: Port device team_slave_0 added [ 69.621133][ T3615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.630741][ T3616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.637789][ T3616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.663758][ T3616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.675223][ T3613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.688138][ T3618] device hsr_slave_0 entered promiscuous mode [ 69.695166][ T3618] device hsr_slave_1 entered promiscuous mode [ 69.701864][ T3618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.709772][ T3618] Cannot create hsr debugfs directory [ 69.716218][ T3617] team0: Port device team_slave_1 added [ 69.723635][ T3615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.733189][ T3616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.740797][ T3616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.766800][ T3616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.832874][ T3616] device hsr_slave_0 entered promiscuous mode [ 69.840220][ T3616] device hsr_slave_1 entered promiscuous mode [ 69.847297][ T3616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.854852][ T3616] Cannot create hsr debugfs directory [ 69.870781][ T3615] team0: Port device team_slave_0 added [ 69.886903][ T3615] team0: Port device team_slave_1 added [ 69.904396][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.911574][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.938251][ T3617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.938878][ T35] Bluetooth: hci0: command 0x0409 tx timeout [ 69.956915][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.963855][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.989819][ T3617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.006930][ T3621] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 70.118899][ T3617] device hsr_slave_0 entered promiscuous mode [ 70.125823][ T3617] device hsr_slave_1 entered promiscuous mode [ 70.153935][ T3617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.161600][ T3617] Cannot create hsr debugfs directory [ 70.166980][ T1162] Bluetooth: hci2: command 0x0409 tx timeout [ 70.193452][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.200695][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.227300][ T3615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.242175][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.246785][ T1162] Bluetooth: hci5: command 0x0409 tx timeout [ 70.249267][ T3268] Bluetooth: hci4: command 0x0409 tx timeout [ 70.261138][ T1162] Bluetooth: hci3: command 0x0409 tx timeout [ 70.265755][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.300681][ T3615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.382989][ T3615] device hsr_slave_0 entered promiscuous mode [ 70.390082][ T3615] device hsr_slave_1 entered promiscuous mode [ 70.396660][ T3615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.404399][ T3615] Cannot create hsr debugfs directory [ 70.561667][ T3613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.619334][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.628100][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.636322][ T3618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.662666][ T3613] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.670515][ T3618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.682404][ T3618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.697925][ T3618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.718293][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.727714][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.736190][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.743450][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.752130][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.761154][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.769774][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.776904][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.784823][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.813386][ T3616] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.832233][ T3616] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.841882][ T3616] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.851958][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.862674][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.890320][ T3616] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.904542][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.914954][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.951296][ T3617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.962858][ T3617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.974827][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.983924][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.992993][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.001496][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.009950][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.018805][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.027312][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.044606][ T3617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.054751][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.062290][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.073927][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.091537][ T3617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.145733][ T3615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.155594][ T3615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.165236][ T3615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.200240][ T3615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.212557][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.227405][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.242282][ T3613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.353660][ T3618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.415103][ T3616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.426445][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.438525][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.447516][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.455058][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.465024][ T3618] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.482483][ T3613] device veth0_vlan entered promiscuous mode [ 71.499107][ T3617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.515673][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.525381][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.535978][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.545137][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.554921][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.562888][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.588435][ T3616] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.599972][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.609224][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.618066][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.625143][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.633040][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.641888][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.650463][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.657574][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.665077][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.673742][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.681605][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.690354][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.698720][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.705750][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.713806][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.721997][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.730598][ T3613] device veth1_vlan entered promiscuous mode [ 71.746844][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.754764][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.764002][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.780743][ T3617] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.809108][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.817749][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.827242][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.835514][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.844573][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.853075][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.860188][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.868075][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.876806][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.885118][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.892209][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.899942][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.908859][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.917451][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.924495][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.933936][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.942087][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.950025][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.981794][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.991945][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.002719][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.011742][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.021981][ T3660] Bluetooth: hci0: command 0x041b tx timeout [ 72.045438][ T3613] device veth0_macvtap entered promiscuous mode [ 72.064027][ T3618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.076767][ T3618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.090000][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.099406][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.107965][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.116290][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.124721][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.133283][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.141800][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.150463][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.159061][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.167793][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.175890][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.184534][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.192955][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.210124][ T3617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.222504][ T3617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.236077][ T3613] device veth1_macvtap entered promiscuous mode [ 72.247033][ T3664] Bluetooth: hci2: command 0x041b tx timeout [ 72.254621][ T3615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.269748][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.278364][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.285879][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.294782][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.302842][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.310930][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.319803][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.328882][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.337615][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.346416][ T3661] Bluetooth: hci3: command 0x041b tx timeout [ 72.368168][ T3661] Bluetooth: hci4: command 0x041b tx timeout [ 72.375513][ T3661] Bluetooth: hci5: command 0x041b tx timeout [ 72.383299][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.391268][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.400656][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.409587][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.423252][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.431841][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.432811][ T3634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.440589][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.453269][ T3634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.455578][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.462597][ T3634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.469463][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.477882][ T3634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.502835][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.503071][ T3634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.520785][ T3634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.530910][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.558405][ T3615] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.571500][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.581059][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.588858][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.598350][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.609458][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.620277][ T3618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.654495][ T3617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.668856][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.678968][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.688389][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.695812][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.703852][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.712801][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.721568][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.728704][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.739440][ T3613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.750030][ T3613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.758774][ T3613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.767905][ T3613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.794519][ T3616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.809565][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.817699][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.837262][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.844678][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.865787][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.874532][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.881668][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.929202][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.938600][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.960966][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.970535][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.998931][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.018219][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.073192][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.092044][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.107090][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.115822][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.133655][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.142892][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.151706][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.172846][ T3617] device veth0_vlan entered promiscuous mode [ 73.187217][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.212884][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.221229][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.267679][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.275311][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.312306][ T3617] device veth1_vlan entered promiscuous mode [ 73.321506][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.330053][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.339111][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.347855][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.355252][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.362837][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.371750][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.418501][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.451298][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.459351][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.467866][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.475524][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.483997][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.505256][ T3615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.526179][ T3618] device veth0_vlan entered promiscuous mode [ 73.532862][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.544304][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.554964][ T3663] chnl_net:caif_netlink_parms(): no params data found [ 73.570179][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.573517][ T3616] device veth0_vlan entered promiscuous mode [ 73.578326][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.600782][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.610253][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.620297][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.628409][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.636433][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.646021][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.654140][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.670286][ T3617] device veth0_macvtap entered promiscuous mode [ 73.710629][ T3616] device veth1_vlan entered promiscuous mode [ 73.719645][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.729016][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.737752][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.746565][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.761078][ T3617] device veth1_macvtap entered promiscuous mode [ 73.785331][ T3618] device veth1_vlan entered promiscuous mode [ 73.815405][ T3615] device veth0_vlan entered promiscuous mode [ 73.853368][ T3617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.876863][ T3617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.901609][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.917035][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.925279][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.935931][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.944814][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.953560][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.962356][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 00:31:24 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 73.975389][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.983535][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.993504][ T3615] device veth1_vlan entered promiscuous mode [ 74.053323][ T3617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.072553][ T3617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.085959][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.087597][ T3658] Bluetooth: hci0: command 0x040f tx timeout [ 74.136618][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.144666][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.153229][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.162161][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.171835][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 00:31:24 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.180730][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.194529][ T3617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204356][ T3617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.213396][ T3617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.222880][ T3617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.285010][ T3618] device veth0_macvtap entered promiscuous mode [ 74.307297][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.315356][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 00:31:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.335880][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.345843][ T3661] Bluetooth: hci2: command 0x040f tx timeout [ 74.359616][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.370574][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.379196][ T3663] device bridge_slave_0 entered promiscuous mode [ 74.388603][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.395714][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.404334][ T3663] device bridge_slave_1 entered promiscuous mode [ 74.416344][ T3659] Bluetooth: hci5: command 0x040f tx timeout [ 74.428248][ T3659] Bluetooth: hci4: command 0x040f tx timeout [ 74.437641][ T3616] device veth0_macvtap entered promiscuous mode [ 74.459315][ T3618] device veth1_macvtap entered promiscuous mode [ 74.468710][ T3659] Bluetooth: hci3: command 0x040f tx timeout 00:31:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.523785][ T3615] device veth0_macvtap entered promiscuous mode [ 74.532409][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.541432][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.550020][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.567527][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.567919][ T3653] Bluetooth: hci1: command 0x0409 tx timeout [ 74.629296][ T3616] device veth1_macvtap entered promiscuous mode [ 74.645828][ T3615] device veth1_macvtap entered promiscuous mode [ 74.658834][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 00:31:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.692875][ T3663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.731027][ T3618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.766434][ T3618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.776964][ T3618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.787731][ T3618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.799354][ T3618] batman_adv: batadv0: Interface activated: batadv_slave_0 00:31:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.817937][ T3663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.848609][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.857582][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.883082][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.890850][ T3618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.913645][ T3618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.915234][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.931331][ T3618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.942702][ T3618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.967656][ T3618] batman_adv: batadv0: Interface activated: batadv_slave_1 00:31:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 74.991481][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.016975][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.027377][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.037926][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056357][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.066973][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.087074][ T3616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.097016][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.109449][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.122854][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.137653][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.147734][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.163240][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.173877][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 75.184431][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.197224][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.211652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.222405][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.238852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.247691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.256322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.265330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.281744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.313722][ T3663] team0: Port device team_slave_0 added [ 75.323449][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.334493][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.344583][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.357305][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.369147][ T3616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.379876][ T3616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.390766][ T3616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.410730][ T3663] team0: Port device team_slave_1 added [ 75.411175][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428135][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.439305][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.454812][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.463588][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.477241][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.489209][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.499047][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.509486][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.522524][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.534376][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.544241][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 75.556930][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.569256][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.589763][ T3618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604044][ T3618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.623487][ T3618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.632347][ T3618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.646150][ T3616] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.656679][ T3616] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.665440][ T3616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674562][ T3616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.695631][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.705433][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.718135][ T3615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.727496][ T3615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.736169][ T3615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.745063][ T3615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780343][ T3663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.789601][ T3663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.816994][ T3663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.831322][ T3663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.839532][ T3663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.866053][ T3663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.000443][ T25] audit: type=1804 audit(1639441886.681:2): pid=3701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/0/bus" dev="sda1" ino=1157 res=1 errno=0 [ 76.025733][ C0] hrtimer: interrupt took 56849 ns [ 76.027792][ T3663] device hsr_slave_0 entered promiscuous mode [ 76.039669][ T3663] device hsr_slave_1 entered promiscuous mode [ 76.046311][ T3663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.054419][ T3663] Cannot create hsr debugfs directory [ 76.074085][ T25] audit: type=1804 audit(1639441886.751:3): pid=3701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/0/bus" dev="sda1" ino=1157 res=1 errno=0 [ 76.169198][ T141] cfg80211: failed to load regulatory.db [ 76.177282][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.207244][ T35] Bluetooth: hci0: command 0x0419 tx timeout [ 76.234189][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.240867][ T25] audit: type=1804 audit(1639441886.811:4): pid=3702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/0/bus" dev="sda1" ino=1157 res=1 errno=0 [ 76.274194][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.283309][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.307376][ T25] audit: type=1804 audit(1639441886.891:5): pid=3701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/0/bus" dev="sda1" ino=1157 res=1 errno=0 [ 76.342646][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.353483][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.418514][ T141] Bluetooth: hci2: command 0x0419 tx timeout [ 76.478219][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486211][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.495306][ T3661] Bluetooth: hci4: command 0x0419 tx timeout [ 76.503848][ T3661] Bluetooth: hci5: command 0x0419 tx timeout [ 76.524203][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.581024][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.601540][ T3661] Bluetooth: hci3: command 0x0419 tx timeout [ 76.647778][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.655741][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.667556][ T1140] Bluetooth: hci1: command 0x041b tx timeout [ 76.683589][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.714914][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.800274][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.824198][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.836630][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.847745][ T3663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.894816][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.917286][ T3663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.935335][ T3663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.964113][ T3663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.143217][ C1] sd 0:0:1:0: [sda] tag#4198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 77.151433][ T3663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.153656][ C1] sd 0:0:1:0: [sda] tag#4198 CDB: opcode=0xe5 (vendor) [ 77.167153][ C1] sd 0:0:1:0: [sda] tag#4198 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 77.176744][ C1] sd 0:0:1:0: [sda] tag#4198 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 77.186316][ C1] sd 0:0:1:0: [sda] tag#4198 CDB[20]: ba [ 77.192090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.203946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.229211][ T3663] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.268449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.282181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.302253][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.309433][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.370524][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.380170][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.395964][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.404836][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.411992][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.428167][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.462088][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.473986][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.493567][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.514694][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.523793][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.534732][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.543836][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.552600][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.567061][ T3663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.578900][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.595872][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.604345][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.630096][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.637830][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.655712][ T3663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.692145][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.701158][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.725789][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.742509][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.782482][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.800805][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.811622][ T3663] device veth0_vlan entered promiscuous mode [ 77.831670][ T3663] device veth1_vlan entered promiscuous mode [ 77.858313][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.867490][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.876426][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.885230][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.896357][ T3663] device veth0_macvtap entered promiscuous mode [ 77.908471][ T3663] device veth1_macvtap entered promiscuous mode [ 77.924093][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.935923][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.947888][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.958652][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.968873][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.981483][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.991550][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.005602][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.021166][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.031618][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.043642][ T3663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.056954][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.065691][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.073701][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.083588][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.097775][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.109680][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.120347][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.131088][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.143952][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.156106][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.167320][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.177807][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.189537][ T3663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.200083][ T3663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.212137][ T3663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.247299][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.255765][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.270813][ T3663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.280219][ T3663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.289510][ T3663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.299018][ T3663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380058][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.395468][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.424257][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.438224][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.446181][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.455574][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:31:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:29 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) 00:31:29 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:29 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:29 executing program 2: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:29 executing program 4: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) [ 78.644659][ T25] audit: type=1804 audit(1639441889.321:6): pid=3725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/1/bus" dev="sda1" ino=1179 res=1 errno=0 00:31:29 executing program 4: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) [ 78.727770][ T3714] Bluetooth: hci1: command 0x040f tx timeout [ 78.761642][ T25] audit: type=1804 audit(1639441889.361:7): pid=3725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/1/bus" dev="sda1" ino=1179 res=1 errno=0 00:31:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:29 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 78.878177][ T25] audit: type=1804 audit(1639441889.391:8): pid=3725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/1/bus" dev="sda1" ino=1179 res=1 errno=0 00:31:29 executing program 4: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:29 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 79.019736][ T25] audit: type=1804 audit(1639441889.511:9): pid=3732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/1/bus" dev="sda1" ino=1179 res=1 errno=0 00:31:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 2: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 79.807612][ T3725] syz-executor.3 (3725) used greatest stack depth: 22760 bytes left 00:31:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 79.930236][ C0] sd 0:0:1:0: [sda] tag#4176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 79.940813][ C0] sd 0:0:1:0: [sda] tag#4176 CDB: opcode=0xe5 (vendor) [ 79.947752][ C0] sd 0:0:1:0: [sda] tag#4176 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 79.957351][ C0] sd 0:0:1:0: [sda] tag#4176 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 79.966993][ C0] sd 0:0:1:0: [sda] tag#4176 CDB[20]: ba 00:31:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 80.171363][ T25] audit: type=1804 audit(1639441890.851:10): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/2/bus" dev="sda1" ino=1172 res=1 errno=0 00:31:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 80.323679][ T25] audit: type=1804 audit(1639441890.951:11): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/2/bus" dev="sda1" ino=1172 res=1 errno=0 00:31:31 executing program 2: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 80.807521][ T3658] Bluetooth: hci1: command 0x0419 tx timeout 00:31:31 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 81.206060][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 81.206108][ T25] audit: type=1804 audit(1639441891.881:14): pid=3794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/3/bus" dev="sda1" ino=1184 res=1 errno=0 00:31:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:32 executing program 5: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) [ 81.430467][ T25] audit: type=1804 audit(1639441891.971:15): pid=3794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/3/bus" dev="sda1" ino=1184 res=1 errno=0 00:31:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 81.608123][ T25] audit: type=1804 audit(1639441891.971:16): pid=3794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/3/bus" dev="sda1" ino=1184 res=1 errno=0 [ 81.733281][ T25] audit: type=1804 audit(1639441892.031:17): pid=3795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/3/bus" dev="sda1" ino=1184 res=1 errno=0 00:31:32 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:32 executing program 4: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:32 executing program 0: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:32 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8000, 0x98}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f90a, 0xfffffffd, '\x00', @value64=0x20000000}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:31:33 executing program 5: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) [ 82.446636][ C0] sd 0:0:1:0: [sda] tag#4218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 82.457070][ C0] sd 0:0:1:0: [sda] tag#4218 CDB: opcode=0xe5 (vendor) [ 82.463941][ C0] sd 0:0:1:0: [sda] tag#4218 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 82.473558][ C0] sd 0:0:1:0: [sda] tag#4218 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 82.483176][ C0] sd 0:0:1:0: [sda] tag#4218 CDB[20]: ba 00:31:33 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:33 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:33 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 82.829126][ C0] sd 0:0:1:0: [sda] tag#4219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 82.839586][ C0] sd 0:0:1:0: [sda] tag#4219 CDB: opcode=0xe5 (vendor) [ 82.846458][ C0] sd 0:0:1:0: [sda] tag#4219 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 82.856082][ C0] sd 0:0:1:0: [sda] tag#4219 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 82.865694][ C0] sd 0:0:1:0: [sda] tag#4219 CDB[20]: ba 00:31:33 executing program 4: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:33 executing program 0: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:33 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 83.029336][ C0] sd 0:0:1:0: [sda] tag#4220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 83.039780][ C0] sd 0:0:1:0: [sda] tag#4220 CDB: opcode=0xe5 (vendor) [ 83.046710][ C0] sd 0:0:1:0: [sda] tag#4220 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 83.056288][ C0] sd 0:0:1:0: [sda] tag#4220 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 83.065886][ C0] sd 0:0:1:0: [sda] tag#4220 CDB[20]: ba 00:31:33 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:33 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:34 executing program 5: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) [ 83.313419][ C0] sd 0:0:1:0: [sda] tag#4221 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 83.323878][ C0] sd 0:0:1:0: [sda] tag#4221 CDB: opcode=0xe5 (vendor) [ 83.330798][ C0] sd 0:0:1:0: [sda] tag#4221 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 83.340417][ C0] sd 0:0:1:0: [sda] tag#4221 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 83.350015][ C0] sd 0:0:1:0: [sda] tag#4221 CDB[20]: ba [ 83.445874][ C0] sd 0:0:1:0: [sda] tag#4222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 83.456307][ C0] sd 0:0:1:0: [sda] tag#4222 CDB: opcode=0xe5 (vendor) [ 83.463252][ C0] sd 0:0:1:0: [sda] tag#4222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 83.472842][ C0] sd 0:0:1:0: [sda] tag#4222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 83.482451][ C0] sd 0:0:1:0: [sda] tag#4222 CDB[20]: ba 00:31:34 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 83.674052][ C0] sd 0:0:1:0: [sda] tag#4223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 83.684510][ C0] sd 0:0:1:0: [sda] tag#4223 CDB: opcode=0xe5 (vendor) [ 83.691437][ C0] sd 0:0:1:0: [sda] tag#4223 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 83.701032][ C0] sd 0:0:1:0: [sda] tag#4223 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 83.710643][ C0] sd 0:0:1:0: [sda] tag#4223 CDB[20]: ba 00:31:34 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:34 executing program 4: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:34 executing program 0: clone(0x200b6c065fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9c) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x0, 0x20, 0x2, 0xa}, 0x71) 00:31:34 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:34 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:34 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 84.179096][ C0] sd 0:0:1:0: [sda] tag#4160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 84.189621][ C0] sd 0:0:1:0: [sda] tag#4160 CDB: opcode=0xe5 (vendor) [ 84.196556][ C0] sd 0:0:1:0: [sda] tag#4160 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 84.206121][ C0] sd 0:0:1:0: [sda] tag#4160 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 84.215745][ C0] sd 0:0:1:0: [sda] tag#4160 CDB[20]: ba 00:31:35 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 84.329400][ C0] sd 0:0:1:0: [sda] tag#4161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 84.339864][ C0] sd 0:0:1:0: [sda] tag#4161 CDB: opcode=0xe5 (vendor) [ 84.346808][ C0] sd 0:0:1:0: [sda] tag#4161 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 84.356366][ C0] sd 0:0:1:0: [sda] tag#4161 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 84.366018][ C0] sd 0:0:1:0: [sda] tag#4161 CDB[20]: ba 00:31:35 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 84.516706][ C0] sd 0:0:1:0: [sda] tag#4162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 84.527208][ C0] sd 0:0:1:0: [sda] tag#4162 CDB: opcode=0xe5 (vendor) [ 84.534081][ C0] sd 0:0:1:0: [sda] tag#4162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 84.543703][ C0] sd 0:0:1:0: [sda] tag#4162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 84.553325][ C0] sd 0:0:1:0: [sda] tag#4162 CDB[20]: ba 00:31:35 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 84.559229][ C0] sd 0:0:1:0: [sda] tag#4163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 84.569629][ C0] sd 0:0:1:0: [sda] tag#4163 CDB: opcode=0xe5 (vendor) [ 84.576546][ C0] sd 0:0:1:0: [sda] tag#4163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 84.586108][ C0] sd 0:0:1:0: [sda] tag#4163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 84.595726][ C0] sd 0:0:1:0: [sda] tag#4163 CDB[20]: ba 00:31:35 executing program 1: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:35 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:35 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:35 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:35 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:35 executing program 3: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:35 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 85.164184][ T25] audit: type=1804 audit(1639441895.841:18): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/13/bus" dev="sda1" ino=1172 res=1 errno=0 [ 85.341989][ T25] audit: type=1804 audit(1639441895.921:19): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/13/bus" dev="sda1" ino=1172 res=1 errno=0 00:31:36 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 00:31:36 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 85.437084][ T3912] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 85.484345][ T25] audit: type=1804 audit(1639441895.941:20): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/13/bus" dev="sda1" ino=1172 res=1 errno=0 00:31:36 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 85.551517][ T3912] File: /root/syzkaller-testdir243793203/syzkaller.Gzs2Td/13/bus PID: 3912 Comm: syz-executor.4 00:31:36 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:36 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 85.753465][ T25] audit: type=1804 audit(1639441895.981:21): pid=3919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/16/bus" dev="sda1" ino=1195 res=1 errno=0 [ 85.980556][ T25] audit: type=1804 audit(1639441896.051:22): pid=3922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/13/bus" dev="sda1" ino=1172 res=1 errno=0 00:31:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 86.055910][ T25] audit: type=1804 audit(1639441896.081:23): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/16/bus" dev="sda1" ino=1195 res=1 errno=0 00:31:36 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x0, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f0000000180)='@', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7d}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) [ 86.306670][ T25] audit: type=1804 audit(1639441896.081:24): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/16/bus" dev="sda1" ino=1195 res=1 errno=0 00:31:37 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 86.556321][ T25] audit: type=1804 audit(1639441896.081:25): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/16/bus" dev="sda1" ino=1195 res=1 errno=0 [ 86.645405][ T3941] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 00:31:37 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 86.771919][ T3941] File: /root/syzkaller-testdir039323545/syzkaller.P9a5A5/13/bus PID: 3941 Comm: syz-executor.2 [ 86.826014][ T25] audit: type=1804 audit(1639441896.521:26): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/17/bus" dev="sda1" ino=1186 res=1 errno=0 [ 87.045963][ T25] audit: type=1804 audit(1639441896.621:27): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/17/bus" dev="sda1" ino=1186 res=1 errno=0 00:31:37 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 87.264248][ T25] audit: type=1804 audit(1639441896.651:28): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/13/bus" dev="sda1" ino=1195 res=1 errno=0 00:31:38 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:38 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 87.360293][ T3955] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 87.414339][ T25] audit: type=1804 audit(1639441896.661:29): pid=3942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/10/bus" dev="sda1" ino=1197 res=1 errno=0 [ 87.496202][ T3955] File: /root/syzkaller-testdir243793203/syzkaller.Gzs2Td/14/bus PID: 3955 Comm: syz-executor.4 [ 87.540690][ T25] audit: type=1804 audit(1639441896.691:30): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/17/bus" dev="sda1" ino=1186 res=1 errno=0 00:31:38 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 87.730840][ T25] audit: type=1804 audit(1639441896.771:31): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir164321245/syzkaller.g8Pi04/17/bus" dev="sda1" ino=1186 res=1 errno=0 00:31:38 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 87.906565][ T3963] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 87.927076][ T25] audit: type=1804 audit(1639441896.791:32): pid=3943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir779089444/syzkaller.riLLe9/10/bus" dev="sda1" ino=1197 res=1 errno=0 [ 87.966769][ T3963] File: /root/syzkaller-testdir169101046/syzkaller.qVkzDi/14/bus PID: 3963 Comm: syz-executor.5 [ 87.968299][ T3615] EXT4-fs (sda1): Inode 1195 (ffff88805b630000): i_reserved_data_blocks (1) not cleared! [ 87.983478][ T3964] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 88.016634][ T25] audit: type=1804 audit(1639441896.791:33): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/13/bus" dev="sda1" ino=1195 res=1 errno=0 00:31:38 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 88.167581][ T3964] File: /root/syzkaller-testdir779089444/syzkaller.riLLe9/11/bus PID: 3964 Comm: syz-executor.3 [ 88.596831][ T3975] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 88.670001][ T3975] File: /root/syzkaller-testdir039323545/syzkaller.P9a5A5/14/bus PID: 3975 Comm: syz-executor.2 00:31:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:39 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:39 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 89.056700][ T3617] EXT4-fs (sda1): Inode 1186 (ffff888072e80000): i_reserved_data_blocks (1) not cleared! 00:31:40 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 89.552979][ T3988] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 00:31:40 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:40 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 89.726798][ T3988] File: /root/syzkaller-testdir779089444/syzkaller.riLLe9/12/bus PID: 3988 Comm: syz-executor.3 00:31:41 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:41 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 91.075180][ T4012] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 91.095798][ T4011] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 91.210157][ T4012] File: /root/syzkaller-testdir164321245/syzkaller.g8Pi04/20/bus PID: 4012 Comm: syz-executor.1 00:31:41 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 91.289567][ T4011] File: /root/syzkaller-testdir779089444/syzkaller.riLLe9/13/bus PID: 4011 Comm: syz-executor.3 00:31:42 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 91.501186][ T25] kauditd_printk_skb: 76 callbacks suppressed [ 91.501203][ T25] audit: type=1804 audit(1639441902.181:110): pid=4022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/17/bus" dev="sda1" ino=1173 res=1 errno=0 00:31:42 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 91.754597][ T25] audit: type=1804 audit(1639441902.301:111): pid=4022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/17/bus" dev="sda1" ino=1173 res=1 errno=0 [ 91.876613][ T25] audit: type=1804 audit(1639441902.341:112): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/16/bus" dev="sda1" ino=1187 res=1 errno=0 00:31:42 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:42 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 92.093600][ T25] audit: type=1804 audit(1639441902.351:113): pid=4022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/17/bus" dev="sda1" ino=1173 res=1 errno=0 [ 92.199673][ T4024] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 00:31:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 92.262368][ T25] audit: type=1804 audit(1639441902.431:114): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/16/bus" dev="sda1" ino=1187 res=1 errno=0 [ 92.287160][ T4024] File: /root/syzkaller-testdir039323545/syzkaller.P9a5A5/16/bus PID: 4024 Comm: syz-executor.2 [ 92.470194][ T25] audit: type=1804 audit(1639441902.431:115): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir243793203/syzkaller.Gzs2Td/17/bus" dev="sda1" ino=1173 res=1 errno=0 [ 92.603026][ T25] audit: type=1804 audit(1639441902.501:116): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/16/bus" dev="sda1" ino=1187 res=1 errno=0 [ 92.715822][ T25] audit: type=1804 audit(1639441902.621:117): pid=4028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir039323545/syzkaller.P9a5A5/16/bus" dev="sda1" ino=1187 res=1 errno=0 [ 92.847599][ T25] audit: type=1804 audit(1639441902.711:118): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir795742351/syzkaller.OY45VU/25/bus" dev="sda1" ino=1199 res=1 errno=0 00:31:43 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) [ 93.020842][ T25] audit: type=1804 audit(1639441902.801:119): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir795742351/syzkaller.OY45VU/25/bus" dev="sda1" ino=1199 res=1 errno=0 00:31:43 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:44 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:44 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:44 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:44 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:44 executing program 5: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:44 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:45 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:45 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:45 executing program 5: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:45 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:45 executing program 5: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) [ 95.157261][ T4081] SET target dimension over the limit! 00:31:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2000}}, {0x0, 0x18}}}, 0xa0) statx(r0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x10903e, 0x51) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r3, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) dup(0xffffffffffffffff) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) 00:31:46 executing program 1: r0 = socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x2) r2 = dup2(r0, r1) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) 00:31:46 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 00:31:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) [ 95.403261][ T4087] SET target dimension over the limit! 00:31:46 executing program 1: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000002380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xda}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7a, 0x1f, "8efb66fbab"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, "457505470788"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf9, 0x7, "50349c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x6, "7a4ff0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, "241189095611bb7934"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf9, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x80, {0x7, 0x25, 0x1, 0x2, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x87, 0x5, 0x6}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x0, 0xbe, 0x33, 0x10, 0x4}, 0xe9, &(0x7f00000024c0)={0x5, 0xf, 0xe9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x43}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f3227322ede7f34b99e5098f6dd3b013"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7, 0xf00, 0x1, [0xff, 0x30]}, @generic={0xb5, 0x10, 0x2, "c8cf8caaf4be029948fd676e0a6b465e9b8209a209666f00dea347a511202187d7dfd201b785703429270b02e480884b03c2c2f5d99a192490649bc06e4e8cf3146979daabff0c8efe9be0c955ee4901f3c241bfc6cc5a5bdb93674d6a9e2ad1d09b0798e62bb7793926d931919b5da124a6aafd6716b82b5023f5c4ca8b799f0085b60139dd145743b01bcdac39d38326b95d9d129b57dabc1dabefcde687284c1aedb64c4c08f0f7c43335437a641fa619"}]}, 0x2, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x415}}]}) [ 95.506916][ T4091] SET target dimension over the limit! 00:31:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 00:31:46 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 00:31:46 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) [ 95.728092][ T4098] SET target dimension over the limit! [ 95.803918][ T4103] SET target dimension over the limit! 00:31:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 00:31:46 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) [ 95.896700][ T3658] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.977834][ T4109] SET target dimension over the limit! [ 96.146590][ T3658] usb 2-1: Using ep0 maxpacket: 32 00:31:46 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x204, 0xd0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0xa8, 0xd0, 0x800000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ipv6={@mcast2, @dev, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) 00:31:46 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:46 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:46 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) [ 96.239996][ T4114] SET target dimension over the limit! [ 96.269820][ T3658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.301586][ T3658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.506873][ T3658] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.526219][ T3658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.542318][ T3658] usb 2-1: Product: syz [ 96.546868][ T3658] usb 2-1: Manufacturer: Е [ 96.551475][ T3658] usb 2-1: SerialNumber: syz [ 96.886835][ T3658] usb 2-1: 0:2 : does not exist [ 96.964608][ T3658] usb 2-1: USB disconnect, device number 2 00:31:48 executing program 1: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000002380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xda}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7a, 0x1f, "8efb66fbab"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, "457505470788"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf9, 0x7, "50349c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x6, "7a4ff0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, "241189095611bb7934"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf9, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x80, {0x7, 0x25, 0x1, 0x2, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x87, 0x5, 0x6}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x0, 0xbe, 0x33, 0x10, 0x4}, 0xe9, &(0x7f00000024c0)={0x5, 0xf, 0xe9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x43}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f3227322ede7f34b99e5098f6dd3b013"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7, 0xf00, 0x1, [0xff, 0x30]}, @generic={0xb5, 0x10, 0x2, "c8cf8caaf4be029948fd676e0a6b465e9b8209a209666f00dea347a511202187d7dfd201b785703429270b02e480884b03c2c2f5d99a192490649bc06e4e8cf3146979daabff0c8efe9be0c955ee4901f3c241bfc6cc5a5bdb93674d6a9e2ad1d09b0798e62bb7793926d931919b5da124a6aafd6716b82b5023f5c4ca8b799f0085b60139dd145743b01bcdac39d38326b95d9d129b57dabc1dabefcde687284c1aedb64c4c08f0f7c43335437a641fa619"}]}, 0x2, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x415}}]}) 00:31:48 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) [ 97.350889][ T4123] udevd[4123]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:31:48 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 2: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000002380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xda}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7a, 0x1f, "8efb66fbab"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, "457505470788"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf9, 0x7, "50349c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x6, "7a4ff0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, "241189095611bb7934"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf9, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x80, {0x7, 0x25, 0x1, 0x2, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x87, 0x5, 0x6}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x0, 0xbe, 0x33, 0x10, 0x4}, 0xe9, &(0x7f00000024c0)={0x5, 0xf, 0xe9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x43}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f3227322ede7f34b99e5098f6dd3b013"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7, 0xf00, 0x1, [0xff, 0x30]}, @generic={0xb5, 0x10, 0x2, "c8cf8caaf4be029948fd676e0a6b465e9b8209a209666f00dea347a511202187d7dfd201b785703429270b02e480884b03c2c2f5d99a192490649bc06e4e8cf3146979daabff0c8efe9be0c955ee4901f3c241bfc6cc5a5bdb93674d6a9e2ad1d09b0798e62bb7793926d931919b5da124a6aafd6716b82b5023f5c4ca8b799f0085b60139dd145743b01bcdac39d38326b95d9d129b57dabc1dabefcde687284c1aedb64c4c08f0f7c43335437a641fa619"}]}, 0x2, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x415}}]}) 00:31:48 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x541b) [ 97.896730][ T3658] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.011654][ T4149] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.076808][ T3653] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.136714][ T3658] usb 2-1: Using ep0 maxpacket: 32 [ 98.256912][ T3658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.304778][ T3658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.346905][ T3653] usb 3-1: Using ep0 maxpacket: 32 [ 98.466889][ T3653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.489534][ T3653] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.506979][ T3658] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.521720][ T3658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.569790][ T3658] usb 2-1: Product: syz [ 98.579653][ T3658] usb 2-1: Manufacturer: Е [ 98.616597][ T3658] usb 2-1: SerialNumber: syz [ 98.676942][ T3653] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.699491][ T3653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.742582][ T3653] usb 3-1: Product: syz [ 98.761547][ T3653] usb 3-1: Manufacturer: Е [ 98.780316][ T3653] usb 3-1: SerialNumber: syz [ 98.986878][ T3658] usb 2-1: 0:2 : does not exist [ 99.018418][ T3658] usb 2-1: USB disconnect, device number 3 [ 99.151230][ T3653] usb 3-1: 0:2 : does not exist [ 99.198132][ T3653] usb 3-1: USB disconnect, device number 2 [ 99.244288][ T3628] udevd[3628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 00:31:50 executing program 1: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000002380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xda}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7a, 0x1f, "8efb66fbab"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, "457505470788"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf9, 0x7, "50349c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x6, "7a4ff0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, "241189095611bb7934"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf9, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x80, {0x7, 0x25, 0x1, 0x2, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x87, 0x5, 0x6}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x0, 0xbe, 0x33, 0x10, 0x4}, 0xe9, &(0x7f00000024c0)={0x5, 0xf, 0xe9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x43}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f3227322ede7f34b99e5098f6dd3b013"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7, 0xf00, 0x1, [0xff, 0x30]}, @generic={0xb5, 0x10, 0x2, "c8cf8caaf4be029948fd676e0a6b465e9b8209a209666f00dea347a511202187d7dfd201b785703429270b02e480884b03c2c2f5d99a192490649bc06e4e8cf3146979daabff0c8efe9be0c955ee4901f3c241bfc6cc5a5bdb93674d6a9e2ad1d09b0798e62bb7793926d931919b5da124a6aafd6716b82b5023f5c4ca8b799f0085b60139dd145743b01bcdac39d38326b95d9d129b57dabc1dabefcde687284c1aedb64c4c08f0f7c43335437a641fa619"}]}, 0x2, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x415}}]}) 00:31:50 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:50 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() timer_create(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x25dfdc00}, 0x10}}, 0x0) 00:31:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0x7}}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:31:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x541b) 00:31:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(r0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4) recvmmsg(r2, &(0x7f0000004d80), 0x493, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704000000000000000100000004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x32, 0x12, 0x2, 0xff, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @remote, @remote]}, 0x98) socketpair(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/230, 0xe6}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000002a00)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) [ 99.531258][ T4154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:31:50 executing program 5: perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x57) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x8000000000003e2, 0x0, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:31:50 executing program 2: syz_usb_connect$uac1(0x0, 0xd3, &(0x7f0000002380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xda}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x7a, 0x1f, "8efb66fbab"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, "457505470788"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x6, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf9, 0x7, "50349c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x6, "7a4ff0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, "241189095611bb7934"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf9, "14"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x80, {0x7, 0x25, 0x1, 0x2, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x87, 0x5, 0x6}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x0, 0xbe, 0x33, 0x10, 0x4}, 0xe9, &(0x7f00000024c0)={0x5, 0xf, 0xe9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x43}, @ss_container_id={0x14, 0x10, 0x4, 0xc7, "f3227322ede7f34b99e5098f6dd3b013"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x7, 0xf00, 0x1, [0xff, 0x30]}, @generic={0xb5, 0x10, 0x2, "c8cf8caaf4be029948fd676e0a6b465e9b8209a209666f00dea347a511202187d7dfd201b785703429270b02e480884b03c2c2f5d99a192490649bc06e4e8cf3146979daabff0c8efe9be0c955ee4901f3c241bfc6cc5a5bdb93674d6a9e2ad1d09b0798e62bb7793926d931919b5da124a6aafd6716b82b5023f5c4ca8b799f0085b60139dd145743b01bcdac39d38326b95d9d129b57dabc1dabefcde687284c1aedb64c4c08f0f7c43335437a641fa619"}]}, 0x2, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x415}}]}) [ 99.669115][ T4161] Zero length message leads to an empty skb 00:31:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0x7}}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:31:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x541b) [ 99.856181][ T4172] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 99.867930][ T4172] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 99.876334][ T4172] CPU: 1 PID: 4172 Comm: syz-executor.4 Not tainted 5.16.0-rc4-next-20211210-syzkaller #0 [ 99.886220][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.896262][ T4172] RIP: 0010:__lock_acquire+0xd7d/0x54a0 [ 99.901820][ T4172] Code: 12 0e 41 be 01 00 00 00 0f 86 c8 00 00 00 89 05 99 83 12 0e e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 f3 2f 00 00 48 81 3b 60 54 1a 8f 0f 84 52 f3 ff [ 99.921421][ T4172] RSP: 0018:ffffc9000c8df0b0 EFLAGS: 00010002 [ 99.927478][ T4172] RAX: dffffc0000000000 RBX: 00000000000005d0 RCX: 0000000000000000 [ 99.935436][ T4172] RDX: 00000000000000ba RSI: 0000000000000000 RDI: 0000000000000001 [ 99.943400][ T4172] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 99.951359][ T4172] R10: 0000000000000000 R11: 000000000008808a R12: 0000000000000000 [ 99.959318][ T4172] R13: ffff888074618000 R14: 0000000000000000 R15: 0000000000000001 [ 99.967275][ T4172] FS: 00007f2a0b676700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 99.976196][ T4172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.982772][ T4172] CR2: 00007f46d6c3a3a5 CR3: 000000001fb88000 CR4: 00000000003506e0 [ 99.990735][ T4172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.998698][ T4172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.006658][ T4172] Call Trace: [ 100.009923][ T4172] [ 100.012842][ T4172] ? deref_stack_reg+0xee/0x150 [ 100.017691][ T4172] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 100.023671][ T4172] ? lock_chain_count+0x20/0x20 [ 100.028523][ T4172] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 100.034504][ T4172] ? find_held_lock+0x2d/0x110 [ 100.039265][ T4172] lock_acquire+0x1ab/0x510 [ 100.043770][ T4172] ? ref_tracker_alloc+0x17c/0x430 [ 100.048872][ T4172] ? lock_release+0x720/0x720 [ 100.053548][ T4172] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 100.059360][ T4172] ? lockdep_hardirqs_on+0x79/0x100 [ 100.064560][ T4172] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 100.070369][ T4172] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 100.075748][ T4172] _raw_spin_lock_irqsave+0x39/0x50 [ 100.080950][ T4172] ? ref_tracker_alloc+0x17c/0x430 [ 100.086054][ T4172] ref_tracker_alloc+0x17c/0x430 [ 100.090983][ T4172] ? ref_tracker_dir_print+0x90/0x90 [ 100.096259][ T4172] ? ethnl_parse_header_dev_get+0x267/0x780 [ 100.102156][ T4172] ? ethnl_default_parse+0x8d/0x130 [ 100.107358][ T4172] ? ethnl_default_start+0x21f/0x560 [ 100.112642][ T4172] ? genl_start+0x3cc/0x670 [ 100.117145][ T4172] ? __netlink_dump_start+0x584/0x900 [ 100.122519][ T4172] ? genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 100.128417][ T4172] ? genl_rcv_msg+0x434/0x580 [ 100.133094][ T4172] ? netlink_rcv_skb+0x153/0x420 [ 100.138033][ T4172] ? genl_rcv+0x24/0x40 [ 100.142192][ T4172] ? netlink_unicast+0x533/0x7d0 [ 100.147131][ T4172] ? netlink_sendmsg+0x904/0xdf0 [ 100.152068][ T4172] ? sock_sendmsg+0xcf/0x120 [ 100.156661][ T4172] ? ____sys_sendmsg+0x6e8/0x810 [ 100.161601][ T4172] ? ___sys_sendmsg+0xf3/0x170 [ 100.166363][ T4172] ? __sys_sendmsg+0xe5/0x1b0 [ 100.171040][ T4172] ? do_syscall_64+0x35/0xb0 [ 100.175626][ T4172] ? __nla_parse+0x3d/0x50 [ 100.180042][ T4172] ethnl_parse_header_dev_get+0x267/0x780 [ 100.185764][ T4172] ? ethnl_ops_complete+0xd0/0xd0 [ 100.190794][ T4172] ethnl_default_parse+0x8d/0x130 [ 100.195819][ T4172] ethnl_default_start+0x21f/0x560 [ 100.200940][ T4172] ? ethnl_default_parse+0x130/0x130 [ 100.206219][ T4172] genl_start+0x3cc/0x670 [ 100.210554][ T4172] __netlink_dump_start+0x584/0x900 [ 100.215756][ T4172] ? genl_family_rcv_msg_doit+0x320/0x320 [ 100.221478][ T4172] ? ethnl_fill_reply_header.part.0+0x390/0x390 [ 100.227722][ T4172] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 100.233459][ T4172] ? genl_rcv+0x40/0x40 [ 100.237626][ T4172] ? __lock_acquire+0x162f/0x54a0 [ 100.242660][ T4172] ? genl_family_rcv_msg_doit+0x320/0x320 [ 100.248385][ T4172] ? ethnl_fill_reply_header.part.0+0x390/0x390 [ 100.254622][ T4172] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 100.260520][ T4172] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 100.266767][ T4172] ? __radix_tree_lookup+0x211/0x2a0 [ 100.272051][ T4172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 100.278294][ T4172] ? genl_get_cmd+0x3cf/0x480 [ 100.282985][ T4172] genl_rcv_msg+0x434/0x580 [ 100.287492][ T4172] ? genl_get_cmd+0x480/0x480 [ 100.292176][ T4172] ? ethnl_reply_init+0x200/0x200 [ 100.297195][ T4172] ? ethnl_default_parse+0x130/0x130 [ 100.302477][ T4172] ? ethnl_fill_reply_header.part.0+0x390/0x390 [ 100.308713][ T4172] ? ethtool_get_phc_vclocks+0x110/0x110 [ 100.314346][ T4172] ? lock_release+0x720/0x720 [ 100.319032][ T4172] netlink_rcv_skb+0x153/0x420 [ 100.323802][ T4172] ? genl_get_cmd+0x480/0x480 [ 100.328493][ T4172] ? netlink_ack+0xa60/0xa60 [ 100.333087][ T4172] ? netlink_deliver_tap+0x1b1/0xc30 [ 100.338375][ T4172] genl_rcv+0x24/0x40 [ 100.342361][ T4172] netlink_unicast+0x533/0x7d0 [ 100.347133][ T4172] ? netlink_attachskb+0x880/0x880 [ 100.352249][ T4172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 100.358493][ T4172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 100.364738][ T4172] ? __phys_addr_symbol+0x2c/0x70 [ 100.369764][ T4172] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 100.375492][ T4172] ? __check_object_size+0x16c/0x4f0 [ 100.380784][ T4172] netlink_sendmsg+0x904/0xdf0 [ 100.385559][ T4172] ? netlink_unicast+0x7d0/0x7d0 [ 100.390500][ T4172] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 100.396746][ T4172] ? netlink_unicast+0x7d0/0x7d0 [ 100.401686][ T4172] sock_sendmsg+0xcf/0x120 [ 100.406108][ T4172] ____sys_sendmsg+0x6e8/0x810 [ 100.410880][ T4172] ? kernel_sendmsg+0x50/0x50 [ 100.415563][ T4172] ? do_recvmmsg+0x6d0/0x6d0 [ 100.420159][ T4172] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 100.426150][ T4172] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 100.432399][ T4172] ___sys_sendmsg+0xf3/0x170 [ 100.436987][ T4172] ? sendmsg_copy_msghdr+0x160/0x160 [ 100.442272][ T4172] ? __fget_files+0x2ce/0x4c0 [ 100.446947][ T4172] ? lock_downgrade+0x6e0/0x6e0 [ 100.451806][ T4172] ? __fget_files+0x2f0/0x4c0 [ 100.456485][ T4172] ? __fget_light+0xea/0x280 [ 100.461076][ T4172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 100.467327][ T4172] __sys_sendmsg+0xe5/0x1b0 [ 100.471828][ T4172] ? __sys_sendmsg_sock+0x30/0x30 [ 100.476854][ T4172] ? syscall_enter_from_user_mode+0x21/0x70 [ 100.482752][ T4172] do_syscall_64+0x35/0xb0 [ 100.487162][ T4172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 100.493060][ T4172] RIP: 0033:0x7f2a0cd21e99 [ 100.497466][ T4172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 100.517062][ T4172] RSP: 002b:00007f2a0b676168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.525467][ T4172] RAX: ffffffffffffffda RBX: 00007f2a0ce35030 RCX: 00007f2a0cd21e99 [ 100.533428][ T4172] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 0000000000000004 [ 100.541388][ T4172] RBP: 00007f2a0cd7bff1 R08: 0000000000000000 R09: 0000000000000000 [ 100.549342][ T4172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.557300][ T4172] R13: 00007fffc850017f R14: 00007f2a0b676300 R15: 0000000000022000 [ 100.565266][ T4172] [ 100.568273][ T4172] Modules linked in: [ 100.572156][ T4172] ---[ end trace 041bde46dc1b4e67 ]--- [ 100.577593][ T4172] RIP: 0010:__lock_acquire+0xd7d/0x54a0 [ 100.583142][ T4172] Code: 12 0e 41 be 01 00 00 00 0f 86 c8 00 00 00 89 05 99 83 12 0e e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 f3 2f 00 00 48 81 3b 60 54 1a 8f 0f 84 52 f3 ff [ 100.602740][ T4172] RSP: 0018:ffffc9000c8df0b0 EFLAGS: 00010002 [ 100.608795][ T4172] RAX: dffffc0000000000 RBX: 00000000000005d0 RCX: 0000000000000000 [ 100.616756][ T4172] RDX: 00000000000000ba RSI: 0000000000000000 RDI: 0000000000000001 [ 100.624717][ T4172] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 100.632675][ T4172] R10: 0000000000000000 R11: 000000000008808a R12: 0000000000000000 [ 100.640635][ T4172] R13: ffff888074618000 R14: 0000000000000000 R15: 0000000000000001 [ 100.648593][ T4172] FS: 00007f2a0b676700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 100.657513][ T4172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.664090][ T4172] CR2: 00007f46d6c3a3a5 CR3: 000000001fb88000 CR4: 00000000003506e0 [ 100.672051][ T4172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.680010][ T4172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.687970][ T4172] Kernel panic - not syncing: Fatal exception [ 100.694280][ T4172] Kernel Offset: disabled [ 100.698586][ T4172] Rebooting in 86400 seconds..