Starting sshd: OK syzkaller syzkaller login: [ 11.320789][ T22] kauditd_printk_skb: 58 callbacks suppressed [ 11.320800][ T22] audit: type=1400 audit(1634665439.702:69): avc: denied { read } for pid=446 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 11.325351][ T22] audit: type=1400 audit(1634665439.702:70): avc: denied { open } for pid=446 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 11.869031][ T22] audit: type=1400 audit(1634665440.252:71): avc: denied { transition } for pid=469 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.873871][ T22] audit: type=1400 audit(1634665440.252:72): avc: denied { write } for pid=469 comm="sh" path="pipe:[11312]" dev="pipefs" ino=11312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.251' (ECDSA) to the list of known hosts. 2021/10/19 17:44:06 fuzzer started 2021/10/19 17:44:07 dialing manager at 10.128.0.163:32879 [ 18.723957][ T22] audit: type=1400 audit(1634665447.102:73): avc: denied { integrity } for pid=488 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 18.728741][ T22] audit: type=1400 audit(1634665447.112:74): avc: denied { mounton } for pid=488 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.729521][ T488] cgroup: Unknown subsys name 'net' [ 18.732232][ T22] audit: type=1400 audit(1634665447.112:75): avc: denied { mount } for pid=488 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.733050][ T488] cgroup: Unknown subsys name 'net_prio' [ 18.736993][ T488] cgroup: Unknown subsys name 'devices' [ 18.737810][ T488] cgroup: Unknown subsys name 'blkio' [ 18.738780][ T22] audit: type=1400 audit(1634665447.122:76): avc: denied { unmount } for pid=488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.858821][ T488] cgroup: Unknown subsys name 'hugetlb' [ 18.864475][ T488] cgroup: Unknown subsys name 'rlimit' 2021/10/19 17:44:07 syscalls: 1982 2021/10/19 17:44:07 code coverage: enabled 2021/10/19 17:44:07 comparison tracing: enabled 2021/10/19 17:44:07 extra coverage: enabled 2021/10/19 17:44:07 setuid sandbox: enabled 2021/10/19 17:44:07 namespace sandbox: enabled 2021/10/19 17:44:07 Android sandbox: enabled 2021/10/19 17:44:07 fault injection: enabled 2021/10/19 17:44:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/19 17:44:07 net packet injection: /dev/net/tun does not exist 2021/10/19 17:44:07 net device setup: enabled 2021/10/19 17:44:07 concurrency sanitizer: enabled 2021/10/19 17:44:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/19 17:44:07 USB emulation: /dev/raw-gadget does not exist 2021/10/19 17:44:07 hci packet injection: /dev/vhci does not exist 2021/10/19 17:44:07 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/10/19 17:44:07 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist [ 18.988785][ T22] audit: type=1400 audit(1634665447.372:77): avc: denied { mounton } for pid=488 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.013481][ T22] audit: type=1400 audit(1634665447.372:78): avc: denied { mount } for pid=488 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2021/10/19 17:44:08 suppressing KCSAN reports in functions: '__xa_clear_mark' 'xas_clear_mark' 'ext4_mark_iloc_dirty' 'blk_mq_rq_ctx_init' 'generic_write_end' 'ext4_free_inodes_count' 'do_sys_poll' '_prb_read_valid' '__io_cqring_fill_event' 'step_into' '__xa_set_mark' 'io_wqe_enqueue' 'blk_mq_free_request' 'jbd2_journal_dirty_metadata' 'tick_nohz_next_event' 'jbd2_journal_stop' 2021/10/19 17:44:08 fetching corpus: 0, signal 0/2000 (executing program) 2021/10/19 17:44:08 fetching corpus: 49, signal 12091/15837 (executing program) 2021/10/19 17:44:08 fetching corpus: 99, signal 17477/22945 (executing program) 2021/10/19 17:44:08 fetching corpus: 149, signal 23475/30530 (executing program) 2021/10/19 17:44:08 fetching corpus: 199, signal 27886/36486 (executing program) 2021/10/19 17:44:08 fetching corpus: 249, signal 29951/40186 (executing program) 2021/10/19 17:44:08 fetching corpus: 299, signal 32591/44297 (executing program) 2021/10/19 17:44:08 fetching corpus: 349, signal 34817/47997 (executing program) 2021/10/19 17:44:08 fetching corpus: 399, signal 36496/51208 (executing program) 2021/10/19 17:44:08 fetching corpus: 449, signal 38814/54954 (executing program) 2021/10/19 17:44:08 fetching corpus: 499, signal 40344/57893 (executing program) 2021/10/19 17:44:08 fetching corpus: 549, signal 42929/61780 (executing program) 2021/10/19 17:44:09 fetching corpus: 599, signal 45915/65939 (executing program) 2021/10/19 17:44:09 fetching corpus: 649, signal 47308/68663 (executing program) 2021/10/19 17:44:09 fetching corpus: 699, signal 48869/71479 (executing program) 2021/10/19 17:44:09 fetching corpus: 749, signal 50316/74202 (executing program) 2021/10/19 17:44:09 fetching corpus: 799, signal 51617/76749 (executing program) 2021/10/19 17:44:09 fetching corpus: 849, signal 52379/78842 (executing program) 2021/10/19 17:44:09 fetching corpus: 899, signal 53440/81159 (executing program) 2021/10/19 17:44:09 fetching corpus: 949, signal 55386/84153 (executing program) 2021/10/19 17:44:09 fetching corpus: 999, signal 56050/86101 (executing program) 2021/10/19 17:44:09 fetching corpus: 1049, signal 57296/88512 (executing program) 2021/10/19 17:44:09 fetching corpus: 1099, signal 58151/90565 (executing program) 2021/10/19 17:44:09 fetching corpus: 1149, signal 59741/93168 (executing program) 2021/10/19 17:44:09 fetching corpus: 1199, signal 60694/95290 (executing program) 2021/10/19 17:44:09 fetching corpus: 1248, signal 62045/97647 (executing program) 2021/10/19 17:44:09 fetching corpus: 1298, signal 62706/99500 (executing program) 2021/10/19 17:44:10 fetching corpus: 1348, signal 63948/101730 (executing program) 2021/10/19 17:44:10 fetching corpus: 1398, signal 65075/103887 (executing program) 2021/10/19 17:44:10 fetching corpus: 1448, signal 65787/105705 (executing program) 2021/10/19 17:44:10 fetching corpus: 1498, signal 67031/107836 (executing program) 2021/10/19 17:44:10 fetching corpus: 1548, signal 67898/109754 (executing program) 2021/10/19 17:44:10 fetching corpus: 1598, signal 69619/112261 (executing program) 2021/10/19 17:44:10 fetching corpus: 1648, signal 70155/113915 (executing program) 2021/10/19 17:44:10 fetching corpus: 1698, signal 70887/115683 (executing program) 2021/10/19 17:44:10 fetching corpus: 1748, signal 71406/117314 (executing program) 2021/10/19 17:44:10 fetching corpus: 1797, signal 73167/119661 (executing program) 2021/10/19 17:44:10 fetching corpus: 1847, signal 74436/121673 (executing program) 2021/10/19 17:44:10 fetching corpus: 1897, signal 75636/123641 (executing program) 2021/10/19 17:44:10 fetching corpus: 1947, signal 76219/125202 (executing program) 2021/10/19 17:44:11 fetching corpus: 1997, signal 76714/126740 (executing program) 2021/10/19 17:44:11 fetching corpus: 2047, signal 77396/128360 (executing program) 2021/10/19 17:44:11 fetching corpus: 2097, signal 78043/129891 (executing program) 2021/10/19 17:44:11 fetching corpus: 2147, signal 78765/131496 (executing program) 2021/10/19 17:44:11 fetching corpus: 2197, signal 79584/133129 (executing program) 2021/10/19 17:44:11 fetching corpus: 2247, signal 80427/134773 (executing program) 2021/10/19 17:44:11 fetching corpus: 2297, signal 81304/136410 (executing program) 2021/10/19 17:44:11 fetching corpus: 2347, signal 81776/137807 (executing program) 2021/10/19 17:44:11 fetching corpus: 2397, signal 82741/139439 (executing program) 2021/10/19 17:44:11 fetching corpus: 2447, signal 83244/140803 (executing program) 2021/10/19 17:44:11 fetching corpus: 2497, signal 83892/142270 (executing program) 2021/10/19 17:44:11 fetching corpus: 2547, signal 84253/143617 (executing program) 2021/10/19 17:44:11 fetching corpus: 2597, signal 84833/144991 (executing program) 2021/10/19 17:44:11 fetching corpus: 2647, signal 85892/146608 (executing program) 2021/10/19 17:44:11 fetching corpus: 2695, signal 86489/147991 (executing program) 2021/10/19 17:44:12 fetching corpus: 2745, signal 86865/149256 (executing program) 2021/10/19 17:44:12 fetching corpus: 2795, signal 87738/150753 (executing program) 2021/10/19 17:44:12 fetching corpus: 2845, signal 88119/151992 (executing program) 2021/10/19 17:44:12 fetching corpus: 2895, signal 88985/153483 (executing program) 2021/10/19 17:44:12 fetching corpus: 2945, signal 89596/154826 (executing program) 2021/10/19 17:44:12 fetching corpus: 2995, signal 90319/156194 (executing program) 2021/10/19 17:44:12 fetching corpus: 3044, signal 90844/157471 (executing program) 2021/10/19 17:44:12 fetching corpus: 3094, signal 91458/158791 (executing program) 2021/10/19 17:44:12 fetching corpus: 3144, signal 91874/159996 (executing program) 2021/10/19 17:44:12 fetching corpus: 3194, signal 92367/161223 (executing program) 2021/10/19 17:44:12 fetching corpus: 3244, signal 92747/162389 (executing program) 2021/10/19 17:44:12 fetching corpus: 3294, signal 93029/163573 (executing program) 2021/10/19 17:44:12 fetching corpus: 3344, signal 93507/164770 (executing program) 2021/10/19 17:44:12 fetching corpus: 3394, signal 94419/166077 (executing program) 2021/10/19 17:44:12 fetching corpus: 3444, signal 94754/167190 (executing program) 2021/10/19 17:44:13 fetching corpus: 3494, signal 95514/168416 (executing program) 2021/10/19 17:44:13 fetching corpus: 3544, signal 96005/169569 (executing program) 2021/10/19 17:44:13 fetching corpus: 3594, signal 96691/170741 (executing program) 2021/10/19 17:44:13 fetching corpus: 3644, signal 96996/171829 (executing program) 2021/10/19 17:44:13 fetching corpus: 3694, signal 97742/173015 (executing program) 2021/10/19 17:44:13 fetching corpus: 3744, signal 98142/174123 (executing program) 2021/10/19 17:44:13 fetching corpus: 3794, signal 98632/175228 (executing program) 2021/10/19 17:44:13 fetching corpus: 3844, signal 99143/176342 (executing program) 2021/10/19 17:44:13 fetching corpus: 3893, signal 99804/177448 (executing program) 2021/10/19 17:44:13 fetching corpus: 3943, signal 100368/178590 (executing program) 2021/10/19 17:44:13 fetching corpus: 3993, signal 100772/179626 (executing program) 2021/10/19 17:44:13 fetching corpus: 4043, signal 101138/180672 (executing program) 2021/10/19 17:44:13 fetching corpus: 4093, signal 101687/181767 (executing program) 2021/10/19 17:44:13 fetching corpus: 4143, signal 102281/182815 (executing program) 2021/10/19 17:44:13 fetching corpus: 4193, signal 102514/183758 (executing program) 2021/10/19 17:44:14 fetching corpus: 4243, signal 103014/184721 (executing program) 2021/10/19 17:44:14 fetching corpus: 4293, signal 103567/185723 (executing program) 2021/10/19 17:44:14 fetching corpus: 4343, signal 104220/186775 (executing program) 2021/10/19 17:44:14 fetching corpus: 4393, signal 104587/187771 (executing program) 2021/10/19 17:44:14 fetching corpus: 4443, signal 104996/188698 (executing program) 2021/10/19 17:44:14 fetching corpus: 4493, signal 105517/189637 (executing program) 2021/10/19 17:44:14 fetching corpus: 4543, signal 105899/190582 (executing program) 2021/10/19 17:44:14 fetching corpus: 4593, signal 106171/191497 (executing program) 2021/10/19 17:44:14 fetching corpus: 4643, signal 106560/192426 (executing program) 2021/10/19 17:44:14 fetching corpus: 4693, signal 107335/193345 (executing program) 2021/10/19 17:44:14 fetching corpus: 4743, signal 108032/194283 (executing program) 2021/10/19 17:44:15 fetching corpus: 4793, signal 108986/195220 (executing program) 2021/10/19 17:44:15 fetching corpus: 4843, signal 109342/196092 (executing program) 2021/10/19 17:44:15 fetching corpus: 4893, signal 109827/196151 (executing program) 2021/10/19 17:44:15 fetching corpus: 4943, signal 110217/196151 (executing program) 2021/10/19 17:44:15 fetching corpus: 4992, signal 110645/196152 (executing program) 2021/10/19 17:44:15 fetching corpus: 5042, signal 111033/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5092, signal 111359/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5142, signal 111826/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5192, signal 112305/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5242, signal 112586/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5292, signal 112865/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5342, signal 113359/196154 (executing program) 2021/10/19 17:44:15 fetching corpus: 5392, signal 113649/196155 (executing program) 2021/10/19 17:44:16 fetching corpus: 5442, signal 114327/196155 (executing program) 2021/10/19 17:44:16 fetching corpus: 5491, signal 114723/196155 (executing program) 2021/10/19 17:44:16 fetching corpus: 5541, signal 115063/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5591, signal 115329/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5641, signal 115574/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5691, signal 115892/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5741, signal 116129/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5791, signal 116631/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5841, signal 117067/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5891, signal 117412/196162 (executing program) 2021/10/19 17:44:16 fetching corpus: 5941, signal 117746/196184 (executing program) 2021/10/19 17:44:16 fetching corpus: 5991, signal 117996/196184 (executing program) 2021/10/19 17:44:16 fetching corpus: 6041, signal 118521/196184 (executing program) 2021/10/19 17:44:16 fetching corpus: 6091, signal 118784/196184 (executing program) 2021/10/19 17:44:17 fetching corpus: 6140, signal 119007/196184 (executing program) 2021/10/19 17:44:17 fetching corpus: 6190, signal 119493/196185 (executing program) 2021/10/19 17:44:17 fetching corpus: 6240, signal 119699/196185 (executing program) 2021/10/19 17:44:17 fetching corpus: 6288, signal 120151/196185 (executing program) 2021/10/19 17:44:17 fetching corpus: 6338, signal 120496/196186 (executing program) 2021/10/19 17:44:17 fetching corpus: 6388, signal 120826/196186 (executing program) 2021/10/19 17:44:17 fetching corpus: 6438, signal 121288/196187 (executing program) 2021/10/19 17:44:17 fetching corpus: 6488, signal 121534/196191 (executing program) 2021/10/19 17:44:17 fetching corpus: 6538, signal 121756/196191 (executing program) 2021/10/19 17:44:17 fetching corpus: 6588, signal 122035/196192 (executing program) 2021/10/19 17:44:17 fetching corpus: 6638, signal 122297/196192 (executing program) 2021/10/19 17:44:17 fetching corpus: 6688, signal 122618/196192 (executing program) 2021/10/19 17:44:18 fetching corpus: 6738, signal 122900/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 6788, signal 123244/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 6838, signal 123559/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 6888, signal 123934/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 6938, signal 124204/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 6988, signal 124503/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 7038, signal 124854/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 7088, signal 125182/196221 (executing program) 2021/10/19 17:44:18 fetching corpus: 7137, signal 125447/196223 (executing program) 2021/10/19 17:44:18 fetching corpus: 7187, signal 125712/196223 (executing program) 2021/10/19 17:44:18 fetching corpus: 7237, signal 125978/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7287, signal 126230/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7337, signal 126532/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7387, signal 126762/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7437, signal 127474/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7487, signal 127863/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7537, signal 128182/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7587, signal 128626/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7637, signal 128852/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7687, signal 129192/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7737, signal 129406/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7787, signal 129592/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7837, signal 129885/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7887, signal 130206/196223 (executing program) 2021/10/19 17:44:19 fetching corpus: 7937, signal 130527/196247 (executing program) 2021/10/19 17:44:19 fetching corpus: 7987, signal 130754/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8037, signal 131066/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8087, signal 131269/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8137, signal 131546/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8187, signal 131802/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8237, signal 132074/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8287, signal 132356/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8337, signal 132558/196247 (executing program) 2021/10/19 17:44:20 fetching corpus: 8387, signal 132797/196251 (executing program) 2021/10/19 17:44:20 fetching corpus: 8437, signal 133103/196251 (executing program) 2021/10/19 17:44:20 fetching corpus: 8487, signal 133324/196251 (executing program) 2021/10/19 17:44:20 fetching corpus: 8537, signal 133549/196251 (executing program) 2021/10/19 17:44:20 fetching corpus: 8587, signal 133774/196251 (executing program) 2021/10/19 17:44:20 fetching corpus: 8637, signal 134091/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8687, signal 134388/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8737, signal 134687/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8787, signal 134944/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8837, signal 135156/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8887, signal 135370/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8937, signal 135604/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 8987, signal 135813/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9037, signal 136087/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9087, signal 136288/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9137, signal 136470/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9187, signal 136710/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9237, signal 136889/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9287, signal 137222/196251 (executing program) 2021/10/19 17:44:21 fetching corpus: 9337, signal 137413/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9387, signal 137715/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9437, signal 137925/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9487, signal 138131/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9537, signal 138379/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9586, signal 138559/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9636, signal 139025/196252 (executing program) 2021/10/19 17:44:22 fetching corpus: 9684, signal 139263/196257 (executing program) 2021/10/19 17:44:22 fetching corpus: 9733, signal 139674/196257 (executing program) 2021/10/19 17:44:22 fetching corpus: 9783, signal 139969/196257 (executing program) 2021/10/19 17:44:22 fetching corpus: 9833, signal 140151/196258 (executing program) 2021/10/19 17:44:23 fetching corpus: 9883, signal 140472/196258 (executing program) 2021/10/19 17:44:23 fetching corpus: 9932, signal 140765/196260 (executing program) 2021/10/19 17:44:23 fetching corpus: 9982, signal 141041/196260 (executing program) 2021/10/19 17:44:23 fetching corpus: 10032, signal 141309/196260 (executing program) 2021/10/19 17:44:23 fetching corpus: 10082, signal 141502/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10132, signal 141720/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10182, signal 142037/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10232, signal 142290/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10282, signal 142537/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10332, signal 142848/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10382, signal 143063/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10431, signal 143307/196261 (executing program) 2021/10/19 17:44:23 fetching corpus: 10481, signal 143489/196261 (executing program) 2021/10/19 17:44:24 fetching corpus: 10531, signal 143760/196261 (executing program) 2021/10/19 17:44:24 fetching corpus: 10581, signal 144148/196261 (executing program) 2021/10/19 17:44:24 fetching corpus: 10631, signal 144606/196261 (executing program) 2021/10/19 17:44:24 fetching corpus: 10681, signal 144812/196261 (executing program) 2021/10/19 17:44:24 fetching corpus: 10731, signal 145012/196264 (executing program) 2021/10/19 17:44:24 fetching corpus: 10781, signal 145389/196264 (executing program) 2021/10/19 17:44:24 fetching corpus: 10831, signal 145728/196264 (executing program) 2021/10/19 17:44:24 fetching corpus: 10881, signal 145926/196264 (executing program) 2021/10/19 17:44:24 fetching corpus: 10931, signal 146324/196264 (executing program) 2021/10/19 17:44:24 fetching corpus: 10981, signal 146522/196265 (executing program) 2021/10/19 17:44:24 fetching corpus: 11031, signal 146807/196265 (executing program) 2021/10/19 17:44:24 fetching corpus: 11081, signal 147072/196265 (executing program) 2021/10/19 17:44:25 fetching corpus: 11131, signal 147302/196265 (executing program) 2021/10/19 17:44:25 fetching corpus: 11181, signal 147462/196265 (executing program) 2021/10/19 17:44:25 fetching corpus: 11231, signal 147645/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11281, signal 147812/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11330, signal 148046/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11379, signal 148219/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11428, signal 148448/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11478, signal 148628/196267 (executing program) 2021/10/19 17:44:25 fetching corpus: 11528, signal 148848/196272 (executing program) 2021/10/19 17:44:25 fetching corpus: 11578, signal 149054/196273 (executing program) 2021/10/19 17:44:25 fetching corpus: 11628, signal 149222/196273 (executing program) 2021/10/19 17:44:25 fetching corpus: 11678, signal 149586/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11728, signal 149821/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11778, signal 150186/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11828, signal 150413/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11878, signal 150638/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11928, signal 150867/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 11978, signal 151068/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 12028, signal 151334/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 12078, signal 151541/196273 (executing program) 2021/10/19 17:44:26 fetching corpus: 12128, signal 151703/196281 (executing program) 2021/10/19 17:44:26 fetching corpus: 12178, signal 151882/196282 (executing program) 2021/10/19 17:44:26 fetching corpus: 12227, signal 152022/196282 (executing program) 2021/10/19 17:44:26 fetching corpus: 12277, signal 152245/196282 (executing program) 2021/10/19 17:44:26 fetching corpus: 12327, signal 152414/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12377, signal 152537/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12427, signal 152856/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12477, signal 153050/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12527, signal 153211/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12577, signal 153348/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12627, signal 153530/196282 (executing program) 2021/10/19 17:44:27 fetching corpus: 12677, signal 153729/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12727, signal 153896/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12777, signal 154090/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12827, signal 154266/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12877, signal 154444/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12927, signal 154611/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 12977, signal 154777/196285 (executing program) 2021/10/19 17:44:27 fetching corpus: 13027, signal 154922/196285 (executing program) 2021/10/19 17:44:28 fetching corpus: 13077, signal 155144/196285 (executing program) 2021/10/19 17:44:28 fetching corpus: 13126, signal 155338/196287 (executing program) 2021/10/19 17:44:28 fetching corpus: 13176, signal 155514/196287 (executing program) 2021/10/19 17:44:28 fetching corpus: 13224, signal 155698/196301 (executing program) 2021/10/19 17:44:28 fetching corpus: 13274, signal 155980/196304 (executing program) 2021/10/19 17:44:28 fetching corpus: 13323, signal 156298/196304 (executing program) 2021/10/19 17:44:28 fetching corpus: 13373, signal 156467/196304 (executing program) 2021/10/19 17:44:28 fetching corpus: 13422, signal 156624/196305 (executing program) 2021/10/19 17:44:28 fetching corpus: 13470, signal 156769/196307 (executing program) 2021/10/19 17:44:28 fetching corpus: 13520, signal 157132/196307 (executing program) 2021/10/19 17:44:28 fetching corpus: 13569, signal 157307/196307 (executing program) 2021/10/19 17:44:28 fetching corpus: 13619, signal 157501/196308 (executing program) 2021/10/19 17:44:29 fetching corpus: 13668, signal 157634/196308 (executing program) 2021/10/19 17:44:29 fetching corpus: 13718, signal 157815/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 13768, signal 158025/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 13818, signal 158230/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 13867, signal 158347/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 13917, signal 158564/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 13967, signal 158826/196315 (executing program) 2021/10/19 17:44:29 fetching corpus: 14016, signal 159153/196317 (executing program) 2021/10/19 17:44:29 fetching corpus: 14065, signal 159316/196317 (executing program) 2021/10/19 17:44:29 fetching corpus: 14115, signal 159460/196317 (executing program) 2021/10/19 17:44:29 fetching corpus: 14165, signal 159666/196321 (executing program) 2021/10/19 17:44:29 fetching corpus: 14214, signal 159845/196321 (executing program) 2021/10/19 17:44:29 fetching corpus: 14264, signal 159970/196321 (executing program) 2021/10/19 17:44:30 fetching corpus: 14314, signal 160171/196323 (executing program) 2021/10/19 17:44:30 fetching corpus: 14364, signal 160364/196323 (executing program) 2021/10/19 17:44:30 fetching corpus: 14414, signal 160531/196324 (executing program) 2021/10/19 17:44:30 fetching corpus: 14462, signal 160728/196326 (executing program) 2021/10/19 17:44:30 fetching corpus: 14511, signal 161076/196330 (executing program) 2021/10/19 17:44:30 fetching corpus: 14561, signal 161220/196330 (executing program) 2021/10/19 17:44:30 fetching corpus: 14611, signal 161346/196334 (executing program) 2021/10/19 17:44:30 fetching corpus: 14659, signal 161504/196346 (executing program) 2021/10/19 17:44:30 fetching corpus: 14709, signal 161633/196346 (executing program) 2021/10/19 17:44:30 fetching corpus: 14758, signal 161851/196351 (executing program) 2021/10/19 17:44:30 fetching corpus: 14806, signal 162042/196351 (executing program) 2021/10/19 17:44:30 fetching corpus: 14856, signal 162202/196351 (executing program) 2021/10/19 17:44:30 fetching corpus: 14906, signal 162374/196353 (executing program) 2021/10/19 17:44:30 fetching corpus: 14955, signal 162529/196356 (executing program) 2021/10/19 17:44:30 fetching corpus: 15005, signal 162766/196365 (executing program) 2021/10/19 17:44:31 fetching corpus: 15055, signal 162949/196370 (executing program) 2021/10/19 17:44:31 fetching corpus: 15104, signal 163138/196370 (executing program) 2021/10/19 17:44:31 fetching corpus: 15154, signal 163307/196370 (executing program) 2021/10/19 17:44:31 fetching corpus: 15204, signal 163437/196370 (executing program) 2021/10/19 17:44:31 fetching corpus: 15254, signal 163594/196376 (executing program) 2021/10/19 17:44:31 fetching corpus: 15304, signal 163776/196376 (executing program) 2021/10/19 17:44:31 fetching corpus: 15354, signal 163961/196376 (executing program) 2021/10/19 17:44:31 fetching corpus: 15403, signal 164074/196384 (executing program) 2021/10/19 17:44:31 fetching corpus: 15453, signal 164258/196393 (executing program) 2021/10/19 17:44:31 fetching corpus: 15503, signal 164383/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15553, signal 164503/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15603, signal 164640/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15653, signal 164767/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15703, signal 164922/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15753, signal 165086/196394 (executing program) 2021/10/19 17:44:31 fetching corpus: 15802, signal 165343/196396 (executing program) 2021/10/19 17:44:31 fetching corpus: 15852, signal 165756/196398 (executing program) 2021/10/19 17:44:32 fetching corpus: 15901, signal 165982/196398 (executing program) 2021/10/19 17:44:32 fetching corpus: 15951, signal 166165/196398 (executing program) 2021/10/19 17:44:32 fetching corpus: 16001, signal 166321/196402 (executing program) 2021/10/19 17:44:32 fetching corpus: 16050, signal 166478/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16100, signal 166749/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16150, signal 166886/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16200, signal 167059/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16250, signal 167206/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16300, signal 167389/196403 (executing program) 2021/10/19 17:44:32 fetching corpus: 16350, signal 167547/196410 (executing program) 2021/10/19 17:44:32 fetching corpus: 16400, signal 167664/196410 (executing program) 2021/10/19 17:44:32 fetching corpus: 16450, signal 167864/196410 (executing program) 2021/10/19 17:44:32 fetching corpus: 16500, signal 167982/196410 (executing program) 2021/10/19 17:44:32 fetching corpus: 16550, signal 168113/196410 (executing program) 2021/10/19 17:44:33 fetching corpus: 16599, signal 168303/196410 (executing program) 2021/10/19 17:44:33 fetching corpus: 16649, signal 168446/196410 (executing program) 2021/10/19 17:44:33 fetching corpus: 16698, signal 168686/196415 (executing program) 2021/10/19 17:44:33 fetching corpus: 16747, signal 168909/196415 (executing program) 2021/10/19 17:44:33 fetching corpus: 16797, signal 169271/196415 (executing program) 2021/10/19 17:44:33 fetching corpus: 16847, signal 169548/196416 (executing program) 2021/10/19 17:44:33 fetching corpus: 16897, signal 169665/196416 (executing program) 2021/10/19 17:44:33 fetching corpus: 16947, signal 169781/196417 (executing program) 2021/10/19 17:44:33 fetching corpus: 16997, signal 169942/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17047, signal 170117/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17097, signal 170261/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17147, signal 170439/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17197, signal 170693/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17247, signal 170840/196418 (executing program) 2021/10/19 17:44:33 fetching corpus: 17297, signal 170951/196428 (executing program) 2021/10/19 17:44:33 fetching corpus: 17347, signal 171105/196428 (executing program) 2021/10/19 17:44:33 fetching corpus: 17397, signal 171279/196430 (executing program) 2021/10/19 17:44:33 fetching corpus: 17447, signal 171475/196432 (executing program) 2021/10/19 17:44:33 fetching corpus: 17497, signal 171613/196435 (executing program) 2021/10/19 17:44:34 fetching corpus: 17547, signal 171769/196435 (executing program) 2021/10/19 17:44:34 fetching corpus: 17596, signal 172181/196435 (executing program) 2021/10/19 17:44:34 fetching corpus: 17645, signal 172285/196436 (executing program) 2021/10/19 17:44:34 fetching corpus: 17695, signal 172477/196436 (executing program) 2021/10/19 17:44:34 fetching corpus: 17745, signal 172632/196436 (executing program) 2021/10/19 17:44:34 fetching corpus: 17795, signal 172840/196436 (executing program) 2021/10/19 17:44:34 fetching corpus: 17845, signal 172988/196438 (executing program) 2021/10/19 17:44:34 fetching corpus: 17895, signal 173143/196438 (executing program) 2021/10/19 17:44:34 fetching corpus: 17945, signal 173267/196438 (executing program) 2021/10/19 17:44:34 fetching corpus: 17995, signal 173437/196439 (executing program) 2021/10/19 17:44:34 fetching corpus: 18045, signal 173631/196440 (executing program) 2021/10/19 17:44:34 fetching corpus: 18095, signal 173745/196440 (executing program) 2021/10/19 17:44:35 fetching corpus: 18145, signal 173918/196440 (executing program) 2021/10/19 17:44:35 fetching corpus: 18194, signal 174214/196444 (executing program) 2021/10/19 17:44:35 fetching corpus: 18243, signal 174353/196444 (executing program) 2021/10/19 17:44:35 fetching corpus: 18293, signal 174494/196456 (executing program) 2021/10/19 17:44:35 fetching corpus: 18343, signal 174664/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18393, signal 174831/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18443, signal 174972/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18493, signal 175192/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18543, signal 175325/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18593, signal 175468/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18642, signal 175640/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18692, signal 175766/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18742, signal 175944/196457 (executing program) 2021/10/19 17:44:35 fetching corpus: 18792, signal 176070/196457 (executing program) 2021/10/19 17:44:36 fetching corpus: 18842, signal 176191/196457 (executing program) 2021/10/19 17:44:36 fetching corpus: 18891, signal 176293/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 18941, signal 176459/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 18991, signal 176617/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19041, signal 176861/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19091, signal 177016/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19140, signal 177167/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19190, signal 177313/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19239, signal 177458/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19289, signal 177560/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19338, signal 177674/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19388, signal 177834/196458 (executing program) 2021/10/19 17:44:36 fetching corpus: 19438, signal 177940/196459 (executing program) 2021/10/19 17:44:36 fetching corpus: 19487, signal 178064/196459 (executing program) 2021/10/19 17:44:37 fetching corpus: 19536, signal 178208/196459 (executing program) 2021/10/19 17:44:37 fetching corpus: 19585, signal 178411/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19635, signal 178545/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19685, signal 178674/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19734, signal 178883/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19783, signal 179010/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19833, signal 179142/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19883, signal 179305/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19933, signal 179433/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 19983, signal 179542/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 20033, signal 179716/196466 (executing program) 2021/10/19 17:44:37 fetching corpus: 20083, signal 179825/196468 (executing program) 2021/10/19 17:44:37 fetching corpus: 20133, signal 179942/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20183, signal 180067/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20233, signal 180190/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20282, signal 180345/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20332, signal 180461/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20382, signal 180579/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20432, signal 180717/196468 (executing program) 2021/10/19 17:44:38 fetching corpus: 20482, signal 180878/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20532, signal 181000/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20582, signal 181159/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20632, signal 181293/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20682, signal 181460/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20731, signal 181688/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20781, signal 181865/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20831, signal 182002/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20881, signal 182145/196471 (executing program) 2021/10/19 17:44:38 fetching corpus: 20931, signal 182261/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 20981, signal 182435/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21031, signal 182587/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21081, signal 182733/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21131, signal 182850/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21180, signal 182966/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21230, signal 183104/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21280, signal 183308/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21330, signal 183424/196471 (executing program) 2021/10/19 17:44:39 fetching corpus: 21379, signal 183558/196479 (executing program) 2021/10/19 17:44:39 fetching corpus: 21429, signal 183681/196479 (executing program) 2021/10/19 17:44:39 fetching corpus: 21479, signal 183821/196479 (executing program) 2021/10/19 17:44:39 fetching corpus: 21529, signal 183944/196479 (executing program) 2021/10/19 17:44:39 fetching corpus: 21579, signal 184087/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21629, signal 184216/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21678, signal 184324/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21727, signal 184478/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21777, signal 184599/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21827, signal 184712/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21877, signal 184837/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21927, signal 184960/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 21977, signal 185186/196479 (executing program) 2021/10/19 17:44:40 fetching corpus: 22027, signal 185309/196480 (executing program) 2021/10/19 17:44:40 fetching corpus: 22077, signal 185411/196480 (executing program) 2021/10/19 17:44:40 fetching corpus: 22127, signal 185560/196480 (executing program) 2021/10/19 17:44:40 fetching corpus: 22177, signal 185658/196480 (executing program) 2021/10/19 17:44:40 fetching corpus: 22227, signal 185790/196480 (executing program) 2021/10/19 17:44:40 fetching corpus: 22277, signal 185985/196481 (executing program) 2021/10/19 17:44:40 fetching corpus: 22327, signal 186092/196481 (executing program) 2021/10/19 17:44:41 fetching corpus: 22376, signal 186275/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22426, signal 186400/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22476, signal 186515/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22526, signal 186713/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22576, signal 186899/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22626, signal 187044/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22676, signal 187170/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22726, signal 187265/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22776, signal 187462/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22826, signal 187577/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22875, signal 187698/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22925, signal 187867/196498 (executing program) 2021/10/19 17:44:41 fetching corpus: 22974, signal 188004/196499 (executing program) 2021/10/19 17:44:41 fetching corpus: 23024, signal 188128/196499 (executing program) 2021/10/19 17:44:42 fetching corpus: 23073, signal 188330/196499 (executing program) 2021/10/19 17:44:42 fetching corpus: 23123, signal 188447/196499 (executing program) 2021/10/19 17:44:42 fetching corpus: 23171, signal 188607/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23221, signal 188829/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23271, signal 188950/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23321, signal 189065/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23371, signal 189217/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23421, signal 189326/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23471, signal 189459/196508 (executing program) 2021/10/19 17:44:42 fetching corpus: 23519, signal 189612/196576 (executing program) 2021/10/19 17:44:42 fetching corpus: 23568, signal 189748/196580 (executing program) 2021/10/19 17:44:42 fetching corpus: 23618, signal 189887/196580 (executing program) 2021/10/19 17:44:43 fetching corpus: 23667, signal 190137/196580 (executing program) 2021/10/19 17:44:43 fetching corpus: 23717, signal 190287/196580 (executing program) 2021/10/19 17:44:43 fetching corpus: 23766, signal 190393/196580 (executing program) 2021/10/19 17:44:43 fetching corpus: 23815, signal 190502/196580 (executing program) 2021/10/19 17:44:43 fetching corpus: 23864, signal 190616/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 23913, signal 190722/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 23963, signal 190909/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 24013, signal 191051/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 24060, signal 191178/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 24110, signal 191307/196581 (executing program) 2021/10/19 17:44:43 fetching corpus: 24160, signal 191448/196583 (executing program) 2021/10/19 17:44:43 fetching corpus: 24210, signal 191587/196583 (executing program) 2021/10/19 17:44:43 fetching corpus: 24260, signal 191685/196583 (executing program) 2021/10/19 17:44:43 fetching corpus: 24310, signal 191806/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24360, signal 191923/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24410, signal 192038/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24459, signal 192120/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24509, signal 192235/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24559, signal 192385/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24609, signal 192542/196597 (executing program) 2021/10/19 17:44:44 fetching corpus: 24658, signal 192702/196601 (executing program) 2021/10/19 17:44:44 fetching corpus: 24706, signal 192817/196601 (executing program) 2021/10/19 17:44:44 fetching corpus: 24756, signal 193008/196601 (executing program) 2021/10/19 17:44:44 fetching corpus: 24806, signal 193152/196601 (executing program) 2021/10/19 17:44:44 fetching corpus: 24855, signal 193253/196601 (executing program) 2021/10/19 17:44:44 fetching corpus: 24904, signal 193360/196602 (executing program) 2021/10/19 17:44:44 fetching corpus: 24954, signal 193584/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25004, signal 193726/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25054, signal 193860/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25104, signal 194015/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25154, signal 194154/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25204, signal 194318/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25254, signal 194484/196602 (executing program) 2021/10/19 17:44:45 fetching corpus: 25304, signal 194593/196605 (executing program) 2021/10/19 17:44:45 fetching corpus: 25353, signal 194701/196605 (executing program) 2021/10/19 17:44:45 fetching corpus: 25393, signal 194787/196635 (executing program) 2021/10/19 17:44:45 fetching corpus: 25393, signal 194787/196635 (executing program) 2021/10/19 17:44:47 starting 6 fuzzer processes 17:44:47 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f0000000080)) 17:44:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x540e, 0x0) 17:44:47 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004, 0x12, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000002c0)) 17:44:47 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:44:47 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:44:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private2}, 0x1c) [ 58.862141][ T22] audit: type=1400 audit(1634665487.232:79): avc: denied { execmem } for pid=496 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.948585][ T22] audit: type=1400 audit(1634665487.332:81): avc: denied { read } for pid=502 comm="syz-executor.1" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.969827][ T22] audit: type=1400 audit(1634665487.332:80): avc: denied { read } for pid=503 comm="syz-executor.0" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.991133][ T22] audit: type=1400 audit(1634665487.332:82): avc: denied { open } for pid=503 comm="syz-executor.0" path="net:[4026531992]" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.014407][ T22] audit: type=1400 audit(1634665487.332:83): avc: denied { mounton } for pid=503 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.036000][ T22] audit: type=1400 audit(1634665487.332:84): avc: denied { module_request } for pid=503 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.057849][ T22] audit: type=1400 audit(1634665487.422:85): avc: denied { sys_module } for pid=503 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.004439][ T22] audit: type=1400 audit(1634665489.382:86): avc: denied { create } for pid=505 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.025045][ T22] audit: type=1400 audit(1634665489.382:87): avc: denied { write } for pid=505 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.045481][ T22] audit: type=1400 audit(1634665489.382:88): avc: denied { read } for pid=505 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.917393][ T22] audit: type=1400 audit(1634665495.292:89): avc: denied { read write } for pid=506 comm="syz-executor.4" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.942030][ T22] audit: type=1400 audit(1634665495.292:90): avc: denied { open } for pid=506 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.966157][ T22] audit: type=1400 audit(1634665495.292:91): avc: denied { ioctl } for pid=506 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 17:44:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x4c}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 17:44:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x45010, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) [ 67.116914][ T22] audit: type=1400 audit(1634665495.382:92): avc: denied { create } for pid=3158 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.116940][ T22] audit: type=1400 audit(1634665495.382:93): avc: denied { setopt } for pid=3158 comm="syz-executor.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.116958][ T22] audit: type=1400 audit(1634665495.392:94): avc: denied { bind } for pid=3158 comm="syz-executor.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.116976][ T22] audit: type=1400 audit(1634665495.392:95): avc: denied { node_bind } for pid=3158 comm="syz-executor.4" saddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 17:44:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d40022, r2}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="3fb99992ba251d3bbe34b4843d74d2b7b4e92b9e5c175dbd8e7fe7736a8212251455747c871646f6a601f03e6e3518ae881b4d16c73f79cc9a006679bcbfd86b5b5f749b0f1ef6a682ffd1ae4ecdc635833f1ae2cd28cf871dd7e2e2a5f37e59d3a92b4ed22c5afac03d596861f77c5c6d44d9bd204825c8794d4885ed8912eead7aad1f1c221dd31543e316a8831ea57e0bbe9f7f56618797ad222a41f2babea97d6fc37ed57564b60badb9aad7daf9dd7a1d63a3d8b7cb6a33152ec019b2ab7a783ee353cfc87af6e0e49b649f2dc97ee93f3bbbd7aa0021137f4c61cb39c7a8492b110a", 0xe5, 0x40810, 0x0, 0x0) 17:44:55 executing program 1: r0 = syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x9) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 17:44:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x1, 0x7f}, {}, {0x16}]}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) [ 67.116994][ T22] audit: type=1400 audit(1634665495.452:96): avc: denied { mounton } for pid=3191 comm="syz-executor.4" path="/root/syzkaller-testdir726298556/syzkaller.hpbNd7/2/file0" dev="sda1" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.117014][ T22] audit: type=1400 audit(1634665495.452:97): avc: denied { mount } for pid=3191 comm="syz-executor.4" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 17:44:55 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@getpolicy={0x50, 0x15, 0x0, 0x0, 0x0, {{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x35880}}, 0x0) [ 67.117032][ T22] audit: type=1400 audit(1634665495.452:98): avc: denied { mounton } for pid=3191 comm="syz-executor.4" path="/root/syzkaller-testdir726298556/syzkaller.hpbNd7/2/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 67.159341][ T3209] loop0: detected capacity change from 0 to 1024 [ 67.307143][ T3209] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 67.325078][ T3209] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.340282][ T3209] EXT4-fs error (device loop0): ext4_free_blocks:5888: comm syz-executor.0: Freeing blocks not in datazone - block = 48, count = 16 [ 67.341364][ T3209] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 17:44:55 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f0000000080)) [ 67.366300][ T3209] EXT4-fs warning (device loop0): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 67.366405][ T3209] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 67.366417][ T3209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.385312][ T3209] syz-executor.0 (3209) used greatest stack depth: 11552 bytes left [ 67.465846][ T3239] loop0: detected capacity change from 0 to 1024 [ 67.473218][ T3239] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 67.483148][ T3239] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.489929][ T3239] EXT4-fs error (device loop0): ext4_free_blocks:5888: comm syz-executor.0: Freeing blocks not in datazone - block = 48, count = 16 [ 67.503888][ T3239] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 67.515599][ T3239] EXT4-fs warning (device loop0): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 67.529905][ T3239] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 67.536640][ T3239] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:44:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x6, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x80, 0x0}}], 0x1, 0x0) 17:44:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x45010, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) 17:44:56 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f0000000140), 0x65, 0x0) 17:44:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f0000000080)) 17:44:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:56 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40020, &(0x7f00000002c0)={[{}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 17:44:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 67.962484][ T3253] loop0: detected capacity change from 0 to 1024 [ 67.979699][ T3253] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 67.995616][ T3253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.008964][ T3253] EXT4-fs error (device loop0): ext4_free_blocks:5888: comm syz-executor.0: Freeing blocks not in datazone - block = 48, count = 16 [ 68.009103][ T3253] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 68.009207][ T3253] EXT4-fs warning (device loop0): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 68.009226][ T3253] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 68.009237][ T3253] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:44:56 executing program 1: io_setup(0x800, &(0x7f00000003c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) io_submit(r0, 0x1, &(0x7f0000003640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 17:44:56 executing program 3: r0 = io_uring_setup(0x6d1, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_setup(0x55e7, &(0x7f00000000c0)={0x0, 0x85e3, 0x2a, 0x0, 0x0, 0x0, r0}) 17:44:56 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x4, 0x0) 17:44:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f0000000080)) 17:44:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x900000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="9c0000004a005f0214f9f424000904000a", 0x11) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17:44:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x45010, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) 17:44:56 executing program 2: r0 = epoll_create(0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xa0000014}) 17:44:56 executing program 3: r0 = io_uring_setup(0x6d1, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_setup(0x55e7, &(0x7f00000000c0)={0x0, 0x85e3, 0x2a, 0x0, 0x0, 0x0, r0}) 17:44:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)='S', 0x1}], 0x2) [ 68.191213][ T3268] loop0: detected capacity change from 0 to 1024 [ 68.209680][ T3268] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:44:56 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x1, "060cd6bed5f770"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "060cd6bed5f770"}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x2b2d, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000240), 0x0) 17:44:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 17:44:56 executing program 3: r0 = io_uring_setup(0x6d1, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_setup(0x55e7, &(0x7f00000000c0)={0x0, 0x85e3, 0x2a, 0x0, 0x0, 0x0, r0}) [ 68.249769][ T3268] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.251130][ T3268] EXT4-fs error (device loop0): ext4_free_blocks:5888: comm syz-executor.0: Freeing blocks not in datazone - block = 48, count = 16 17:44:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0xc58) 17:44:56 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000002}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xa9aaaa0a) [ 68.300342][ C1] sd 0:0:1:0: tag#7777 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:44:56 executing program 3: r0 = io_uring_setup(0x6d1, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_setup(0x55e7, &(0x7f00000000c0)={0x0, 0x85e3, 0x2a, 0x0, 0x0, 0x0, r0}) 17:44:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0xc58) 17:44:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 68.300361][ C1] sd 0:0:1:0: tag#7777 CDB: opcode=0xe5 (vendor) [ 68.300376][ C1] sd 0:0:1:0: tag#7777 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 68.300393][ C1] sd 0:0:1:0: tag#7777 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 68.300408][ C1] sd 0:0:1:0: tag#7777 CDB[20]: ba [ 68.332673][ T3268] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 68.332806][ T3268] EXT4-fs warning (device loop0): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 68.332829][ T3268] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 68.332842][ T3268] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:44:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x45010, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) 17:44:56 executing program 3: clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) gettid() clone3(&(0x7f0000001280)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 17:44:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6c}, {0x7c}, {0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:44:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x74}, {0x4c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:44:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0xc58) 17:44:56 executing program 2: io_setup(0xa7, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 17:44:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0xc58) 17:44:57 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 17:44:57 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17:44:57 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1) 17:44:57 executing program 1: unshare(0x20000600) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0x0, 0xce, 0x0, 0x0) 17:44:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8954, 0x0) 17:44:57 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 17:44:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a68c53e8ef0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 17:44:57 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) 17:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x2c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x2c}}, 0x0) 17:44:57 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x11000) 17:44:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 17:44:57 executing program 5: io_setup(0x8000, &(0x7f0000000000)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/locks\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/locks\x00', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000007c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffd}]) [ 69.433558][ C1] sd 0:0:1:0: tag#7782 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.443396][ C1] sd 0:0:1:0: tag#7782 CDB: opcode=0xe5 (vendor) [ 69.449927][ C1] sd 0:0:1:0: tag#7782 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.458982][ C1] sd 0:0:1:0: tag#7782 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.468029][ C1] sd 0:0:1:0: tag#7782 CDB[20]: ba [ 69.476434][ T3366] tmpfs: Bad value for 'mpol' 17:44:57 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) [ 69.483815][ C1] sd 0:0:1:0: tag#7783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.493656][ C1] sd 0:0:1:0: tag#7783 CDB: opcode=0xe5 (vendor) [ 69.500089][ C1] sd 0:0:1:0: tag#7783 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.509120][ C1] sd 0:0:1:0: tag#7783 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.518168][ C1] sd 0:0:1:0: tag#7783 CDB[20]: ba [ 69.524404][ T3375] tmpfs: Bad value for 'mpol' [ 69.553676][ C0] sd 0:0:1:0: tag#7701 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.563570][ C0] sd 0:0:1:0: tag#7701 CDB: opcode=0xe5 (vendor) [ 69.569995][ C0] sd 0:0:1:0: tag#7701 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.579121][ C0] sd 0:0:1:0: tag#7701 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.588183][ C0] sd 0:0:1:0: tag#7701 CDB[20]: ba [ 69.596179][ T3380] tmpfs: Bad value for 'mpol' 17:44:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="13fce8daa43eaebede66530700ae897094e7b126b097eaa7be6d05c41bd3b04bfbd7d135f18b938c9a3f5b80612ab3dcd94d1db6e81c0b5f19697910289c360eb6be20c5d4e7324bd793b1d9d97fdbffebeba0790eceb5e4c235841af1f4eb7697864abeb8be66d05b617ade8335ba357db1e0e1d566937ffe7169d5824dbd42cdba53e16c274c0b0d9c949bbff33d907fbff3e2a051d9d3dffefe640210e09ea1a6f7cf756653287e49d463b5104aae6baf08d19b125b73af896706c43f52011cd44797a64786c135a33bc77f83c837a638a32c5af6d60aa012df08ff0e8f7c9b1598d9dd65759156faab3a2a571284000000000000a821067b7dd1ce8ef1593f6febcc47d25333a0900b2db9a252988c7b4b40ea53461fddf903", 0x11b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:58 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) 17:44:58 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) 17:44:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 17:44:58 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x11000) 17:44:58 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) [ 70.078801][ C1] sd 0:0:1:0: tag#7784 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 70.084454][ C0] sd 0:0:1:0: tag#7702 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 70.088660][ C1] sd 0:0:1:0: tag#7784 CDB: opcode=0xe5 (vendor) [ 70.098816][ C0] sd 0:0:1:0: tag#7702 CDB: opcode=0xe5 (vendor) [ 70.105201][ C1] sd 0:0:1:0: tag#7784 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:44:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x11b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 17:44:58 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) [ 70.111514][ C0] sd 0:0:1:0: tag#7702 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 70.120606][ C1] sd 0:0:1:0: tag#7784 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 70.129622][ C0] sd 0:0:1:0: tag#7702 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 70.138645][ C1] sd 0:0:1:0: tag#7784 CDB[20]: ba [ 70.152865][ C0] sd 0:0:1:0: tag#7702 CDB[20]: ba [ 70.161371][ T3393] tmpfs: Bad value for 'mpol' [ 70.161467][ T3397] tmpfs: Bad value for 'mpol' 17:44:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x11b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}) 17:44:58 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) [ 70.249479][ C0] sd 0:0:1:0: tag#7703 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 70.259339][ C0] sd 0:0:1:0: tag#7703 CDB: opcode=0xe5 (vendor) [ 70.265674][ C0] sd 0:0:1:0: tag#7703 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 70.274729][ C0] sd 0:0:1:0: tag#7703 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 70.278773][ T3418] tmpfs: Bad value for 'mpol' [ 70.283880][ C0] sd 0:0:1:0: tag#7703 CDB[20]: ba 17:44:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="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", 0x11b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:44:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x482b3161) 17:44:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) [ 70.312779][ C1] sd 0:0:1:0: tag#7785 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 70.322648][ C1] sd 0:0:1:0: tag#7785 CDB: opcode=0xe5 (vendor) [ 70.328995][ C1] sd 0:0:1:0: tag#7785 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 70.338038][ C1] sd 0:0:1:0: tag#7785 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 70.347104][ C1] sd 0:0:1:0: tag#7785 CDB[20]: ba 17:44:58 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000)) [ 70.371357][ T3423] tmpfs: Bad value for 'mpol' 17:44:58 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x11000) 17:44:59 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 17:44:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000006c0)="2400000052001f020807f4f9002304000a04f51108020400020100020800038005000000", 0x24) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:44:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000600)={0x0, 0x0, 'client1\x00', 0x0, "2397d6e7ec69c864", "c6d1b1761c5c8d0d507688fa6b1c780d0d989de4fae3ea8a3a9d685fe9ce34d1"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "778d13f1072472ee", "cbbff7210573bb372f3ad7bca9f2dd94553d756e0ec22353fe5f4982c73690de"}) 17:44:59 executing program 1: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746176653a002d0a83c3155310e94d723a3a02fb8b15a69bf73a7b5dbe07c2bd3d1c59d6787982cead43f6665c5afbd1824a607766c1cbde83f5fc2da19e1e8423388b9bcfb77997f2959a87ff7b56cd8c6f22dce200759b2bd0a5b3431e63"]) 17:44:59 executing program 0: r0 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x8f1c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000002000000000000000200000000001"], 0x20) 17:44:59 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) creat(&(0x7f0000000140)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x0, 0x11000) 17:44:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) [ 70.939038][ C1] sd 0:0:1:0: tag#7786 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 70.948955][ C1] sd 0:0:1:0: tag#7786 CDB: opcode=0xe5 (vendor) [ 70.955338][ C1] sd 0:0:1:0: tag#7786 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 70.964393][ C1] sd 0:0:1:0: tag#7786 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 70.973457][ C1] sd 0:0:1:0: tag#7786 CDB[20]: ba 17:44:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0xfffffffe}, {0x15}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 17:44:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @remote, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r2}}}], 0x28}, 0x0) [ 70.984900][ T3443] tmpfs: Bad value for 'mpol' 17:44:59 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xb3a, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000003c0), 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x1770, &(0x7f0000000340), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 17:44:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @remote, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r2}}}], 0x28}, 0x0) 17:44:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @remote, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r2}}}], 0x28}, 0x0) [ 71.033016][ T3452] loop4: detected capacity change from 0 to 69632 [ 71.089939][ T3452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.120784][ T3452] EXT4-fs error (device loop4): ext4_map_blocks:593: inode #2: block 9: comm syz-executor.4: lblock 0 mapped to illegal pblock 9 (length 1) [ 71.153058][ C1] hrtimer: interrupt took 18741 ns 17:44:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:44:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @remote, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r2}}}], 0x28}, 0x0) 17:44:59 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup2(r0, r1) 17:44:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:44:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000600)={0x0, 0x0, 'client1\x00', 0x0, "2397d6e7ec69c864", "c6d1b1761c5c8d0d507688fa6b1c780d0d989de4fae3ea8a3a9d685fe9ce34d1"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "778d13f1072472ee", "cbbff7210573bb372f3ad7bca9f2dd94553d756e0ec22353fe5f4982c73690de"}) 17:44:59 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, {{@in=@private}, 0x0, @in6=@private2}}, 0xe8) 17:44:59 executing program 0: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 17:44:59 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}], 0x0, &(0x7f0000000040)=ANY=[]) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 17:44:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:44:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001a00)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x11}}], 0x30}}], 0x2, 0x0) 17:45:00 executing program 3: clone3(&(0x7f0000000340)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f0000000240)=""/19, 0x13, 0x0, 0x0}, 0x58) [ 71.562481][ T3494] loop1: detected capacity change from 0 to 224 [ 71.586007][ T3488] loop2: detected capacity change from 0 to 69632 [ 71.596852][ T3484] loop4: detected capacity change from 0 to 69632 17:45:00 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) [ 71.634808][ T3484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.656241][ T3488] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.670681][ T3484] EXT4-fs error (device loop4): ext4_map_blocks:593: inode #2: block 9: comm syz-executor.4: lblock 0 mapped to illegal pblock 9 (length 1) 17:45:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:45:00 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}], 0x0, &(0x7f0000000040)=ANY=[]) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 17:45:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000600)={0x0, 0x0, 'client1\x00', 0x0, "2397d6e7ec69c864", "c6d1b1761c5c8d0d507688fa6b1c780d0d989de4fae3ea8a3a9d685fe9ce34d1"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "778d13f1072472ee", "cbbff7210573bb372f3ad7bca9f2dd94553d756e0ec22353fe5f4982c73690de"}) 17:45:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:45:00 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) finit_module(r0, 0x0, 0x0) 17:45:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 71.696081][ T3488] EXT4-fs error (device loop2): ext4_map_blocks:593: inode #2: block 9: comm syz-executor.2: lblock 0 mapped to illegal pblock 9 (length 1) 17:45:00 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000001240)="0b73e0f3195a15c4800f1b9bcbdaf7bdc4478aa4e45ba9873f9943fd45405a76eec1d9ee34f9e0afa76dc5e9b4ae97b2b23a2a39c2027d6da2657279a1a5e547be79924858f15813625692faedf0f0570047c888c6656b06abb727f5cd1e516b16d080285d7de061f10a47e57c0282758e8b1f5d267e28f913d7083781bfa388d40504a7dc25a89b9eff97fe739e388912fc564546bce6ea37b709890bb531b054f2c08b054231dcc00a", 0xaa}], 0x1) [ 71.762127][ T3515] loop1: detected capacity change from 0 to 224 [ 71.768595][ T3518] loop0: detected capacity change from 0 to 16 [ 71.790308][ T3522] SELinux: Context sàóZÄ€›ËÚ÷½ÄGŠ¤ä[©‡?™CýE@ZvîÁÙî4ù௧mÅé´®—²²:*9Â}m¢ery¡¥åG¾y’HXñXbV’úíððW is not valid (left unmapped). 17:45:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 17:45:00 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}], 0x0, &(0x7f0000000040)=ANY=[]) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 71.832332][ T3524] loop4: detected capacity change from 0 to 69632 [ 71.838568][ T3518] attempt to access beyond end of device [ 71.838568][ T3518] loop0: rw=2049, want=17, limit=16 [ 71.849806][ T3518] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 71.870177][ T3524] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 71.878208][ T3526] loop2: detected capacity change from 0 to 69632 [ 71.893961][ T3518] attempt to access beyond end of device [ 71.893961][ T3518] loop0: rw=2049, want=18, limit=16 [ 71.904693][ T3518] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 71.912486][ T3536] loop1: detected capacity change from 0 to 224 17:45:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000600)={0x0, 0x0, 'client1\x00', 0x0, "2397d6e7ec69c864", "c6d1b1761c5c8d0d507688fa6b1c780d0d989de4fae3ea8a3a9d685fe9ce34d1"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "778d13f1072472ee", "cbbff7210573bb372f3ad7bca9f2dd94553d756e0ec22353fe5f4982c73690de"}) 17:45:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 71.920669][ T3524] EXT4-fs error (device loop4): ext4_map_blocks:593: inode #2: block 9: comm syz-executor.4: lblock 0 mapped to illegal pblock 9 (length 1) [ 71.945750][ T3518] attempt to access beyond end of device [ 71.945750][ T3518] loop0: rw=2049, want=21, limit=16 [ 71.957234][ T3535] attempt to access beyond end of device [ 71.957234][ T3535] loop0: rw=2049, want=21, limit=16 [ 71.958481][ T3526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:45:00 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}], 0x0, &(0x7f0000000040)=ANY=[]) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 17:45:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fd\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040), 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) dup(r2) fcntl$setownex(r0, 0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fork() r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r3, 0x0, 0x19) 17:45:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 17:45:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 72.015253][ T3518] syz-executor.0 (3518) used greatest stack depth: 11184 bytes left [ 72.053726][ T22] kauditd_printk_skb: 46 callbacks suppressed 17:45:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 72.053736][ T22] audit: type=1400 audit(1634665500.432:145): avc: denied { unmount } for pid=503 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.074006][ T3550] loop1: detected capacity change from 0 to 224 [ 72.100469][ T3555] loop3: detected capacity change from 0 to 16 17:45:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 72.113304][ T3555] attempt to access beyond end of device [ 72.113304][ T3555] loop3: rw=2049, want=17, limit=16 [ 72.118475][ T3552] loop4: detected capacity change from 0 to 69632 [ 72.124043][ T3555] Buffer I/O error on dev loop3, logical block 16, lost async page write [ 72.142638][ T3555] attempt to access beyond end of device [ 72.142638][ T3555] loop3: rw=2049, want=18, limit=16 [ 72.153379][ T3555] Buffer I/O error on dev loop3, logical block 17, lost async page write [ 72.169795][ T3561] loop0: detected capacity change from 0 to 16 [ 72.171998][ T3552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.197699][ T3561] attempt to access beyond end of device [ 72.197699][ T3561] loop0: rw=2049, want=17, limit=16 [ 72.208426][ T3561] Buffer I/O error on dev loop0, logical block 16, lost async page write 17:45:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) 17:45:00 executing program 5: pipe(&(0x7f0000001280)={0xffffffffffffffff}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000012c0), 0x1, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000001540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 72.212998][ T3566] loop1: detected capacity change from 0 to 16 [ 72.219879][ T3561] attempt to access beyond end of device [ 72.219879][ T3561] loop0: rw=2049, want=18, limit=16 [ 72.233676][ T3561] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 72.260113][ T3566] attempt to access beyond end of device 17:45:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 72.260113][ T3566] loop1: rw=2049, want=17, limit=16 [ 72.270769][ T3563] loop2: detected capacity change from 0 to 69632 [ 72.270844][ T3566] Buffer I/O error on dev loop1, logical block 16, lost async page write [ 72.291779][ T3566] attempt to access beyond end of device [ 72.291779][ T3566] loop1: rw=2049, want=18, limit=16 [ 72.302501][ T3566] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 72.309158][ T3563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.327135][ T3566] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 72.328199][ T3575] loop3: detected capacity change from 0 to 16 [ 72.335747][ T3566] Buffer I/O error on dev loop1, logical block 18, lost async page write 17:45:00 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 17:45:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) [ 72.358445][ T3563] EXT4-fs error (device loop2): ext4_map_blocks:593: inode #2: block 9: comm syz-executor.2: lblock 0 mapped to illegal pblock 9 (length 1) [ 72.365516][ T3578] loop0: detected capacity change from 0 to 16 [ 72.411360][ T22] audit: type=1400 audit(1634665500.792:146): avc: denied { create } for pid=3581 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 17:45:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @local}}]}, 0x110) 17:45:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) 17:45:00 executing program 5: io_setup(0x1000, &(0x7f0000000000)=0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:45:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) 17:45:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) 17:45:00 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1) 17:45:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$rfkill(r0, &(0x7f0000000040), 0x8) [ 72.443646][ T22] audit: type=1400 audit(1634665500.812:147): avc: denied { write } for pid=3581 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.464037][ T22] audit: type=1400 audit(1634665500.812:148): avc: denied { nlmsg_write } for pid=3581 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.499626][ T3589] loop3: detected capacity change from 0 to 16 [ 72.506187][ T3591] loop1: detected capacity change from 0 to 16 [ 72.530179][ T3594] loop0: detected capacity change from 0 to 16 [ 72.533990][ T22] audit: type=1400 audit(1634665500.902:149): avc: denied { read } for pid=3586 comm="syz-executor.5" name="rtc0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 17:45:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000013c0)=[{}]}) 17:45:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)) 17:45:01 executing program 4: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 17:45:01 executing program 3: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000068000307ffff00c8c803880600000000000000ff08000c"], 0x20}}, 0x0) [ 72.559654][ T22] audit: type=1400 audit(1634665500.902:150): avc: denied { open } for pid=3586 comm="syz-executor.5" path="/dev/rtc0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 17:45:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000909000a00800000000000000000000800030000000000", 0x24) 17:45:01 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x50, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x7}]}, 0x50}}, 0x0) 17:45:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x801) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000100)={{0x80}}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 72.625663][ T22] audit: type=1400 audit(1634665501.006:151): avc: denied { mount } for pid=3607 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 17:45:01 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88804, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@private2, 0x65, r3}) pipe(&(0x7f0000000080)) [ 72.685240][ T22] audit: type=1400 audit(1634665501.066:152): avc: denied { create } for pid=3614 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.705999][ T22] audit: type=1400 audit(1634665501.066:153): avc: denied { write } for pid=3614 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 17:45:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0x458) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[], 0x5b) sendfile(r0, r0, &(0x7f00000000c0), 0x7fff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="89", 0x1}], 0x1, 0x0, 0x0, 0x0) 17:45:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@rthdrdstopts={{0x18}}], 0x18}, 0x0) 17:45:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b44, 0x0) 17:45:01 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 17:45:01 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') [ 72.726905][ T22] audit: type=1400 audit(1634665501.066:154): avc: denied { nlmsg_read } for pid=3614 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 17:45:01 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) 17:45:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(0x0, 0x0, 0x7, 0x0) 17:45:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:45:01 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x2726, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0xffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:45:01 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'r\xd8(T8\xbf\x81:\x92\xa8fd\xcd\xb1'}}]}}) 17:45:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, &(0x7f0000000180)) 17:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x406000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}]}) [ 72.814475][ T3637] loop1: detected capacity change from 0 to 16 [ 72.836930][ T3646] loop3: detected capacity change from 0 to 1 17:45:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001500)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@dontfrag={{0x12, 0x11, 0x67}}], 0x28}, 0x0) 17:45:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x3f}, 0x10) write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000100feffffff0800000000000000", 0x24) 17:45:01 executing program 2: unshare(0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newpolicy={0xb8, 0x1e, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) [ 72.876969][ T3650] loop4: detected capacity change from 0 to 16480 [ 72.884248][ T3646] loop3: p1 p2 p3 p4 [ 72.890355][ T3646] loop3: p1 start 10 is beyond EOD, truncated [ 72.896506][ T3646] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 72.911497][ T3646] loop3: p3 start 225 is beyond EOD, truncated [ 72.917762][ T3646] loop3: p4 size 3657465856 extends beyond EOD, truncated 17:45:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x94, 0x0, 0x0, 0xdd020000}]}) [ 72.939925][ T3650] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 72.960207][ T3650] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 17 [ 72.973551][ T3650] ext4_test_bit(bit=16, block=18) = 0 [ 72.978996][ T3650] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,,errors=continue. Quota mode: none. [ 72.994106][ T3664] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.016052][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.026995][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory 17:45:02 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 17:45:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) 17:45:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x179, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 17:45:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:45:02 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) 17:45:02 executing program 2: unshare(0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newpolicy={0xb8, 0x1e, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17:45:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x179, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 17:45:02 executing program 2: unshare(0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newpolicy={0xb8, 0x1e, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) [ 73.631561][ T3673] loop3: detected capacity change from 0 to 1 [ 73.646569][ T3671] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x179, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 17:45:02 executing program 1: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000671000/0x3000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)) shmat(0x0, &(0x7f000058d000/0x1000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) read(0xffffffffffffffff, &(0x7f00000012c0)=""/136, 0x88) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='::,[-\n\xf5\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13\x04\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xfd\xf1\xf99E>\xe1\"\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://t\x00\x00\x00\x00\x00\x00\x00\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x6, 0x10000, 0x8, 0xffffffffffff0001, 0x40, 0x6, 0x0, 0x1f}, 0x0, 0x4, 0xffffffffffffffff, 0x8) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) socket$inet(0x2, 0x3, 0x0) 17:45:02 executing program 2: unshare(0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newpolicy={0xb8, 0x1e, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) [ 73.676902][ T3687] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.697989][ T3211] loop3: p1 p2 p3 p4 [ 73.702346][ T3211] loop3: p1 start 10 is beyond EOD, truncated [ 73.708481][ T3211] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 73.709062][ T3690] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x179, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) [ 73.727774][ T3211] loop3: p3 start 225 is beyond EOD, truncated [ 73.734349][ T3211] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 73.763065][ T3673] loop3: p1 p2 p3 p4 [ 73.767226][ T3673] loop3: p1 start 10 is beyond EOD, truncated [ 73.773335][ T3673] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 73.783783][ T3673] loop3: p3 start 225 is beyond EOD, truncated [ 73.790011][ T3673] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 73.846004][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 73.850445][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.868709][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.868934][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory 17:45:02 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 17:45:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) fchmod(r1, 0x0) 17:45:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc}, {0x35, 0x0, 0x0, 0x64c}, {0x6, 0x0, 0x0, 0x7fffff7a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 17:45:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:45:02 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) 17:45:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000400)={0x783ff113, 0x0, 0x0, 0x0, 0x0, "37c1bc2c7c06376ce78a8b1b0745f27d7a33d9"}) 17:45:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:45:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 74.502260][ T3714] loop3: detected capacity change from 0 to 1 [ 74.539021][ T3721] device lo entered promiscuous mode 17:45:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "00800000a2b70021000010000085c104000008"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/4076, 0xfec}], 0x1) 17:45:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 74.558172][ T3718] device lo left promiscuous mode [ 74.558332][ T3714] loop3: p1 p2 p3 p4 [ 74.567525][ T3714] loop3: p1 start 10 is beyond EOD, truncated [ 74.573634][ T3714] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 74.581902][ T3726] device lo entered promiscuous mode [ 74.588028][ T3718] device lo left promiscuous mode [ 74.593359][ T3714] loop3: p3 start 225 is beyond EOD, truncated [ 74.599687][ T3714] loop3: p4 size 3657465856 extends beyond EOD, truncated 17:45:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 17:45:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 74.651456][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 74.653162][ T3731] device lo entered promiscuous mode [ 74.662372][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 74.697511][ T3736] loop3: detected capacity change from 0 to 1 [ 74.700932][ T3738] device lo entered promiscuous mode [ 74.709138][ T3730] device lo left promiscuous mode [ 74.728019][ T3737] device lo left promiscuous mode [ 74.728148][ T3211] loop3: p1 p2 p3 p4 [ 74.737371][ T3211] loop3: p1 start 10 is beyond EOD, truncated [ 74.743474][ T3211] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 74.751041][ T3211] loop3: p3 start 225 is beyond EOD, truncated [ 74.757267][ T3211] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 74.768830][ T3736] loop3: p1 p2 p3 p4 [ 74.772969][ T3736] loop3: p1 start 10 is beyond EOD, truncated [ 74.779228][ T3736] loop3: p2 size 1073872896 extends beyond EOD, truncated [ 74.786806][ T3736] loop3: p3 start 225 is beyond EOD, truncated [ 74.792987][ T3736] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 74.846055][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 74.846817][ T3211] udevd[3211]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory 17:45:03 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 17:45:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:45:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:45:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 17:45:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) 17:45:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) 17:45:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:45:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = dup2(r0, r0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 75.342143][ T3741] device lo entered promiscuous mode [ 75.347715][ T3744] device lo entered promiscuous mode [ 75.356526][ T3739] device lo left promiscuous mode [ 75.378942][ T3740] device lo left promiscuous mode 17:45:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) 17:45:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 17:45:03 executing program 3: syz_io_uring_setup(0x8a, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f000087b000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x71c4, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 17:45:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x5608, 0x0) [ 75.409205][ T3750] device lo entered promiscuous mode [ 75.423985][ T3756] device lo entered promiscuous mode [ 75.429601][ T3749] device lo left promiscuous mode 17:45:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="550193361bbc9a73569aba82115b063b", 0x10) close(r0) [ 75.468094][ T3755] device lo left promiscuous mode 17:45:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 17:45:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5414, &(0x7f0000000000)={0xfff9, 0x0, 0x0, 0x0, 0x0, "37bfa2f2607793c7"}) 17:45:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@dev, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) sendmsg$inet6(r0, &(0x7f0000001640)={&(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="3b95", 0x2}], 0x1}, 0x8000) 17:45:04 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) 17:45:04 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/37) 17:45:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cb, 0x0) 17:45:04 executing program 2: io_setup(0x1f, &(0x7f0000002240)=0x0) r1 = memfd_create(&(0x7f00000001c0)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x00\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4\xb5\xed\x867rk\xea\x85g\xb1\xa1\xe3R\xf0\v<\xf1\xa7\xa2\x84\x95:dhi\x1dOk\xab\x8b9\xb0[\xeedl#X\x01#\xca9\xc3\xf5W\xbf\xcd\xaf3bM\xf9\x96>\xdbw\xabS\x7f\xad\xd2R\xba\x17\xd2\x04\x84\x92\x16Q\xb2\xd6\x84]\xdc\xc3#\rW*\xcb\xa8\x8bO\xd4#\xd1\x02d\x1c\xd9Vm[00x0}) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={r1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000240), 0x10) 17:45:05 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x16}}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x10) 17:45:05 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 77.117503][ T3814] loop3: detected capacity change from 0 to 6 [ 77.143363][ T3814] FAT-fs (loop3): Directory bread(block 6) failed [ 77.184405][ T3814] FAT-fs (loop3): Directory bread(block 6) failed [ 77.205992][ T3814] FAT-fs (loop3): Directory bread(block 6) failed 17:45:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) modify_ldt$write(0x2, 0x0, 0x0) 17:45:05 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x16}}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x10) 17:45:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b67, &(0x7f0000000140)={0x2000, 0x0, 0x0, 0x0, 0x0, "ed7da488026f3ff32622476d1819baad468f94"}) 17:45:05 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000001, 0x0) getdents64(r0, &(0x7f0000000080)=""/38, 0x26) [ 77.229312][ T3838] FAT-fs (loop3): Directory bread(block 6) failed [ 77.242618][ T22] kauditd_printk_skb: 69 callbacks suppressed [ 77.242628][ T22] audit: type=1400 audit(1634665505.626:224): avc: denied { mount } for pid=3840 comm="syz-executor.4" name="/" dev="ramfs" ino=13946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 17:45:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x61, &(0x7f0000000200)={[{@huge_never}]}) 17:45:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000001800)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x3c}}, 0x0) [ 77.311969][ T22] audit: type=1400 audit(1634665505.696:225): avc: denied { unmount } for pid=506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.359797][ T3855] ======================================================= [ 77.359797][ T3855] WARNING: The mand mount option has been deprecated and [ 77.359797][ T3855] and is ignored by this kernel. Remove the mand [ 77.359797][ T3855] option from the mount to silence this warning. [ 77.359797][ T3855] ======================================================= [ 77.385581][ T22] audit: type=1400 audit(1634665505.746:226): avc: denied { mount } for pid=3854 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.417233][ T22] audit: type=1400 audit(1634665505.746:227): avc: denied { remount } for pid=3854 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.437231][ T22] audit: type=1400 audit(1634665505.756:228): avc: denied { mount } for pid=3856 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 17:45:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 17:45:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0xac}, {0x35, 0x0, 0x0, 0x3}, {0x6}]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 17:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x14}, @void, @val={0xc}}}}, 0x28}}, 0x0) 17:45:05 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000008480), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$MON_IOCX_GET(r0, 0x7040, 0x0) 17:45:05 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) [ 77.459398][ T22] audit: type=1400 audit(1634665505.756:229): avc: denied { mounton } for pid=3856 comm="syz-executor.4" path="/root/syzkaller-testdir726298556/syzkaller.hpbNd7/32/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 77.486447][ T22] audit: type=1400 audit(1634665505.846:230): avc: denied { mounton } for pid=3854 comm="syz-executor.1" path="/root/syzkaller-testdir715819412/syzkaller.TaHk7L/38/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.513492][ T22] audit: type=1400 audit(1634665505.846:231): avc: denied { unmount } for pid=506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.533402][ T22] audit: type=1400 audit(1634665505.876:232): avc: denied { unmount } for pid=502 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 17:45:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 77.554024][ T22] audit: type=1326 audit(1634665505.946:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ab291ca39 code=0x0 17:45:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x80, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 17:45:06 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) [ 77.600915][ T3875] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 77.611796][ T3877] mmap: syz-executor.0 (3877) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.625884][ T3878] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x14}, @void, @val={0xc}}}}, 0x28}}, 0x0) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 17:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x14}, @void, @val={0xc}}}}, 0x28}}, 0x0) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) [ 77.718013][ T3889] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 77.777584][ T3894] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:45:06 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 17:45:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x80, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 17:45:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x9, 0x0, 0x0, {{}, {@val={0x14}, @void, @val={0xc}}}}, 0x28}}, 0x0) 17:45:06 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 17:45:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x35) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) [ 78.429227][ T3909] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:45:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x80, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) 17:45:06 executing program 1: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1044042, 0x0) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = dup(r2) write$binfmt_elf64(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}}) 17:45:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 17:45:06 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066", 0xd, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) fstatfs(r0, &(0x7f0000000280)=""/4096) 17:45:07 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) 17:45:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x80, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) [ 78.601066][ T3926] loop1: detected capacity change from 0 to 512 [ 78.640308][ T3926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 17:45:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x3, 0x0, 0xa}}}, 0xb8}}, 0x0) 17:45:07 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 17:45:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=@expire={0xf8, 0x10, 0x1, 0x0, 0x0, {{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b}, {@in=@empty}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 17:45:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x22202, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004d500)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x1, "060cd6bed5f770"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "060cd6bed5f770"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004e500)={0x0, 0x0, "d4e35a0c6e057a5083d3e4f35a0ca330b44c185b09842ffe94eda943c050d841eb2333b87cf34374d4cf186e63ecfd16724063c6e623f203b40c8e78abb284d069d657983e6009a8e839148081b1bc4546a8b5499c259a074fb8841e0c875ad78b3bd75b4612e62468a4ba66dcb43864b1cd07c34fb41f3c20433c2f65625e71ec236bf69db17712ecb2b327927aa87eff4cd147901034ce260d2054c49a4dd54ce91bc70d231f799acfb1f58b07a9cd6d04993f939e0ccf141ef0b5a957eb9b033bd8c32df63587e51c52cf7f1f796a74584b46bc1ad8ae3aa6357ae6b5c8150b0c6b9173cc6efe768e8ad74038238bd4959256d1ab7c58d26d9462a0be6b91", "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"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(r0, r5, &(0x7f0000000000)=0x2, 0x0) 17:45:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f00000001c0)={'sit0\x00', 0x0}) 17:45:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) [ 78.719399][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:45:07 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(r1, 0x2008000) write$binfmt_aout(r0, 0x0, 0x7ce) 17:45:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 78.791404][ C1] sd 0:0:1:0: tag#7791 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 78.801346][ C1] sd 0:0:1:0: tag#7791 CDB: opcode=0xe5 (vendor) [ 78.807708][ C1] sd 0:0:1:0: tag#7791 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 78.816873][ C1] sd 0:0:1:0: tag#7791 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 78.825920][ C1] sd 0:0:1:0: tag#7791 CDB[20]: ba 17:45:07 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 17:45:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 78.854184][ C0] sd 0:0:1:0: tag#7704 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 78.864212][ C0] sd 0:0:1:0: tag#7704 CDB: opcode=0xe5 (vendor) [ 78.870593][ C0] sd 0:0:1:0: tag#7704 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 78.879666][ C0] sd 0:0:1:0: tag#7704 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 78.888755][ C0] sd 0:0:1:0: tag#7704 CDB[20]: ba 17:45:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000032a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x8001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17:45:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x84}, {0x15, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 17:45:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 17:45:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 17:45:07 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 17:45:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 17:45:07 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 17:45:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x40000, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 17:45:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write(r0, &(0x7f0000000000)="e1", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3b, 0x0, &(0x7f0000000180)) 17:45:07 executing program 4: rseq(&(0x7f0000000100), 0x20, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ed", 0x1}], 0x1, 0x0, 0x0) 17:45:07 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) 17:45:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 17:45:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004400), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, 0x0) 17:45:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/40, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/202, 0xca) 17:45:07 executing program 0: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r0, 0x1) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 17:45:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 17:45:07 executing program 1: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/259, 0x103}], 0x1, 0x0, 0x0) 17:45:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x8, 0x13, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x28}}, 0x0) 17:45:07 executing program 0: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/40, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/202, 0xca) 17:45:07 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0xc0202, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) 17:45:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000380)=0x7, 0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 17:45:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) unshare(0x8060200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 17:45:07 executing program 1: r0 = epoll_create1(0x0) r1 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@N\xff\x03\x00\x00\x00\x00\x00\x00\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdf~\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\xf2\aw\xa8\x91\xc5\xb1\xab\x1a\xd8a\xb6=\xee\x16\x9b\x8c\xa7k\n\x86\xc3.\xd5\x9a\xaa\xcd(ovjd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\x99m~\x05\xd5\xb9\xfc\x88\xf7\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c\x01\x8eu\x85\xces\x89\x95&#FX\xb1\xb6V\x843\b\xb2\xeblh\x99\xd3\xec\xa6\xf7\x91\x9c\x85\xbb\xc3T\xb7\x98\x11\x0f\xa7\x7f\xdf=\x96C\xc8\x84\xf3\xf9\x19\x83\xe31\x90\xd1w2\x12\xf1\xc7\xab)\x80E\xc9\x0f\xc8\aD\x93Xb-?0\x12\x8b\x99+\xec\xca\x9e\x05\x00\x00\x00\x00\x00\x00\x00\x8a\xc8\x99\x81\x80\xe6\xbc\x1fB\x96\xf1x\xadj\xab\xc0\xf8\x7f&\x13\xf1\x96\x00\x8fS\x8d\xfd\xcad\x19\x03\x91L\xdd\x8b:\xd3\x97\xa3\x15\x8bH\xf3M\f\x1b4\xc3\xa0\xe6\xd1\x9d(\xe1\xa1\xf7\xb9\xf18\x18\x8c\x17\x86(\xd2\x0e\x8b\xaeH\x00\xb1\xa6X\x88\xdd\x809\x17\xc1bxN\xd9\xa1\xfc\x00\x00\x00\x00\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setown(r1, 0x8, 0x0) dup2(r0, r1) 17:45:07 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x800, 0x0) 17:45:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/40, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/202, 0xca) 17:45:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xfffffffe}, 0x10) write(r0, &(0x7f0000000280)="110000001a009b8a140000003b9b301f00", 0x11) 17:45:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/40, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/202, 0xca) 17:45:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f00000010c0)="58b981a0715624edaf9b4b", 0xb) 17:45:07 executing program 4: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0) [ 79.302284][ T4016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4016 comm=syz-executor.3 [ 79.326069][ T4027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4027 comm=syz-executor.3 17:45:07 executing program 0: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1={0x1c, 0x1, '\x00', 0x8}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x4c}}, 0x0) 17:45:07 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:07 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') writev(r0, &(0x7f0000000640)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) 17:45:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffbff}]}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 17:45:07 executing program 4: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:07 executing program 5: set_mempolicy(0x2, &(0x7f0000000240)=0xfffffffffffffffd, 0x40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000340)=""/192) 17:45:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x2, 0x0) 17:45:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:07 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) mkdirat(r0, &(0x7f0000000980)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000100)='./file3\x00', r0, &(0x7f0000000200)='./file0\x00') r1 = openat(r0, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000140)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0x3) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@private2, @mcast2, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getdents(r1, &(0x7f0000000000)=""/94, 0x5e) 17:45:07 executing program 3: io_setup(0x7ff, &(0x7f00000000c0)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x1) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 17:45:07 executing program 0: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:07 executing program 1: creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/118, 0x76}], 0x1, 0x23ee, 0x0) [ 79.481002][ T4062] loop1: detected capacity change from 0 to 264192 17:45:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000740)={0x0, 0x0, {0x3, 0x0, 0x4}}) 17:45:08 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:08 executing program 4: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:08 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x9}, 0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 0: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:08 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 4: r0 = getpid() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) accept$unix(r1, 0x0, 0x0) 17:45:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) io_uring_enter(r0, 0x569d, 0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:08 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 17:45:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 17:45:08 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1008, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)='data=writeback') 17:45:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') read$ptp(r0, &(0x7f00000006c0)=""/4096, 0x1000) [ 80.539293][ T4139] EXT4-fs (sda1): Cannot change data mode on remount 17:45:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:09 executing program 1: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) 17:45:09 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000340)=""/53, 0x35) 17:45:09 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:09 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc058534b, &(0x7f0000000300)={0x81, 0x0, 'client0\x00', 0x0, "7f412eb0e0d500a1", "4fe85345103e49345588a4953885efbc9e492132626a1a9868dde348a4e1bb01"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) tkill(r0, 0x7) 17:45:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008d40)=[{{&(0x7f0000000400)={0x2, 0x4e24}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xae}, @ra={0x94, 0x4, 0x300}]}}}], 0x18}}], 0x1, 0x0) 17:45:09 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 17:45:09 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000340)=""/53, 0x35) 17:45:09 executing program 1: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300060000000000000000003800000000000000001900000000200001000000000000000000000003"], 0x69) close(r1) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17:45:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"91ebd4c0d5c3d9742729106b2eb47b86", 0x0, 0x0, {}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x4, 0x0, 0x1]}) set_mempolicy(0x3, &(0x7f0000000140)=0x446bac37, 0x100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) poll(0x0, 0x0, 0x204) 17:45:09 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000340)=""/53, 0x35) 17:45:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x74, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x7}]}, 0x10) r1 = socket(0x11, 0x3, 0x0) sendmsg(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:45:10 executing program 1: r0 = socket$inet6(0xa, 0x2000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 17:45:10 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000340)=""/53, 0x35) 17:45:10 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4, 0x4) 17:45:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {}, {r3}], 0x5, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) poll(&(0x7f0000002800)=[{}, {}, {r2}, {r0}], 0x4, 0x4a) shutdown(r2, 0x0) 17:45:10 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4, 0x4) 17:45:10 executing program 1: unshare(0x4020400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 17:45:10 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x7) r0 = epoll_create(0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20002015}) 17:45:10 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x32) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 17:45:10 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4, 0x4) 17:45:10 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/223, 0xdf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x103, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001a00)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000004c0)) tkill(r0, 0x7) 17:45:10 executing program 1: clock_adjtime(0x0, &(0x7f0000000100)={0x641e}) 17:45:11 executing program 2: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 17:45:11 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4, 0x4) 17:45:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x1, 0x5, &(0x7f0000000080)="9466dbde", 0x4) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 17:45:11 executing program 5: r0 = syz_io_uring_setup(0x75ca, &(0x7f0000000200), &(0x7f00003b2000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x90040, 0x0, 0x28}, &(0x7f00000001c0)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 17:45:11 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff}}) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:45:11 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4) 17:45:11 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f00000005c0)={0x0, 0x0, 0x5}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 17:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) 17:45:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e81b01dd4e000e0d001800ea1100310005000000", 0x29}], 0x1) 17:45:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x18, 0x0, &(0x7f00000012c0)) 17:45:11 executing program 0: getrandom(&(0x7f0000000040)=""/63, 0x3f, 0x4) 17:45:11 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) 17:45:11 executing program 4: inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0x1ff}, &(0x7f0000000080), 0x0) 17:45:11 executing program 0: capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)) setpriority(0x2, 0x0, 0x95) [ 83.108299][ T22] kauditd_printk_skb: 102 callbacks suppressed [ 83.108313][ T22] audit: type=1400 audit(1634665511.496:336): avc: denied { getopt } for pid=4262 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 17:45:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x2}, 0x20) 17:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) 17:45:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0xfffffffc}]}, 0x28}], 0x1}, 0x0) 17:45:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="d8677e9a7b90a693e81eb9e35ca9", 0xe, 0x3}], 0x0, &(0x7f0000000180)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@rodir}, {@shortname_lower}]}) 17:45:11 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 17:45:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) set_mempolicy(0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 83.200534][ T22] audit: type=1400 audit(1634665511.586:337): avc: denied { cpu } for pid=4283 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 17:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x30}}, 0x0) 17:45:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x9, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 17:45:11 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x100) sendmmsg$unix(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x56}}, @cred={{0x1c}}], 0x30}}], 0x2, 0x0) [ 83.252539][ T4294] loop5: detected capacity change from 0 to 264192 [ 83.288653][ T4294] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 17:45:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="1c", 0x1}], 0x1}}], 0x1, 0x20008801) recvmsg$unix(r1, &(0x7f0000004fc0)={0x0, 0xfffffffffffffe87, &(0x7f0000004ec0), 0x1}, 0x3) 17:45:11 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) splice(r2, &(0x7f0000000000), r0, 0x0, 0x7, 0x0) [ 83.311111][ T4305] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 83.324470][ T22] audit: type=1400 audit(1634665511.706:338): avc: denied { map } for pid=4306 comm="syz-executor.1" path="/dev/sg0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.349236][ T4294] FAT-fs (loop5): invalid media value (0x00) 17:45:11 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) 17:45:11 executing program 0: set_mempolicy(0x1, 0x0, 0x0) unshare(0x62000200) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="24000000240007021dfffd946fa201000100000001000000000000e5f1fffffff7fffe7e", 0x24}], 0x1}, 0x0) 17:45:11 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x100) sendmmsg$unix(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x56}}, @cred={{0x1c}}], 0x30}}], 0x2, 0x0) [ 83.355488][ T4294] FAT-fs (loop5): Can't find a valid FAT filesystem 17:45:11 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) getsockopt$inet_mreqn(r0, 0x29, 0x35, 0x0, &(0x7f0000000180)) [ 83.401659][ T4294] loop5: detected capacity change from 0 to 264192 [ 83.418118][ T4294] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 17:45:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="d8677e9a7b90a693e81eb9e35ca9", 0xe, 0x3}], 0x0, &(0x7f0000000180)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@rodir}, {@shortname_lower}]}) 17:45:11 executing program 1: times(&(0x7f00000000c0)) times(&(0x7f0000000040)) 17:45:11 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = eventfd(0x1) r3 = fcntl$dupfd(r2, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:11 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x100) sendmmsg$unix(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x56}}, @cred={{0x1c}}], 0x30}}], 0x2, 0x0) 17:45:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_ts_info={0x4e}}) 17:45:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$cgroup_pid(r0, 0x0, 0x0) [ 83.447692][ T4294] FAT-fs (loop5): invalid media value (0x00) [ 83.453749][ T4294] FAT-fs (loop5): Can't find a valid FAT filesystem 17:45:11 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0/file0\x00', 0x6000, 0x0) lchown(&(0x7f0000000040)='./file0/file0\x00', 0xee00, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x42, 0x0) 17:45:11 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x100) sendmmsg$unix(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x56}}, @cred={{0x1c}}], 0x30}}], 0x2, 0x0) 17:45:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000440)={0x1, 0x0, 0x0, '*'}) 17:45:11 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/90, 0x5a) lseek(r0, 0x200, 0x0) getdents64(r0, &(0x7f0000000080)=""/38, 0x26) [ 83.532107][ T22] audit: type=1400 audit(1634665511.916:339): avc: denied { create } for pid=4340 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.552648][ T4344] loop5: detected capacity change from 0 to 264192 [ 83.571995][ T4349] sd 0:0:1:0: device reset 17:45:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 83.598534][ T4344] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.620535][ T22] audit: type=1400 audit(1634665511.946:340): avc: denied { setattr } for pid=4340 comm="syz-executor.2" name="file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 17:45:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="d8677e9a7b90a693e81eb9e35ca9", 0xe, 0x3}], 0x0, &(0x7f0000000180)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@rodir}, {@shortname_lower}]}) 17:45:12 executing program 2: clock_gettime(0x8, &(0x7f0000000280)) 17:45:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x24}, {0x50}, {0x6}]}, 0x10) writev(r0, &(0x7f0000001740)=[{&(0x7f00000013c0)="b1", 0x1}], 0x1) 17:45:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@fat=@uid={'uid', 0x3d, r1}}]}) 17:45:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x60, 0x2}, @ramp}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) write$evdev(r0, &(0x7f0000000040), 0x373) [ 83.654144][ T4344] FAT-fs (loop5): invalid media value (0x00) [ 83.660371][ T4344] FAT-fs (loop5): Can't find a valid FAT filesystem [ 83.720432][ T22] audit: type=1400 audit(1634665512.106:341): avc: denied { write } for pid=4368 comm="syz-executor.3" name="event2" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.744422][ T4372] loop5: detected capacity change from 0 to 264192 [ 83.745193][ T4372] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.766467][ T4372] FAT-fs (loop5): invalid media value (0x00) [ 83.772674][ T4372] FAT-fs (loop5): Can't find a valid FAT filesystem 17:45:14 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/182, 0xe) 17:45:14 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r0, 0xffffffffffff77fc, 0x0, 0x0) 17:45:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x562eac7d}], 0x0, &(0x7f0000000680)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 17:45:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="d8677e9a7b90a693e81eb9e35ca9", 0xe, 0x3}], 0x0, &(0x7f0000000180)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@rodir}, {@shortname_lower}]}) 17:45:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@fat=@uid={'uid', 0x3d, r1}}]}) 17:45:14 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:14 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000015c0)='./file0\x00', 0x8400058f) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x0) [ 86.522424][ T4377] loop3: detected capacity change from 0 to 264192 [ 86.533282][ T4383] loop5: detected capacity change from 0 to 264192 17:45:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@fat=@uid={'uid', 0x3d, r1}}]}) 17:45:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x78}}, 0x0) 17:45:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x562eac7d}], 0x0, &(0x7f0000000680)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 86.563768][ T4383] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.589505][ T4383] FAT-fs (loop5): invalid media value (0x00) [ 86.595547][ T4383] FAT-fs (loop5): Can't find a valid FAT filesystem 17:45:15 executing program 4: set_mempolicy(0x2, &(0x7f00000001c0)=0x7ff, 0x3f45) modify_ldt$write2(0x11, &(0x7f0000000400), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 86.628219][ T22] audit: type=1400 audit(1634665515.016:342): avc: denied { create } for pid=4393 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.649304][ T22] audit: type=1400 audit(1634665515.016:343): avc: denied { write } for pid=4393 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 17:45:15 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@fat=@uid={'uid', 0x3d, r1}}]}) 17:45:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 86.670898][ T22] audit: type=1400 audit(1634665515.056:344): avc: denied { append } for pid=362 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.693021][ T22] audit: type=1400 audit(1634665515.056:345): avc: denied { open } for pid=362 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.698125][ T4400] loop3: detected capacity change from 0 to 264192 17:45:15 executing program 5: r0 = memfd_create(&(0x7f00000004c0)='\x84\xd4\xe3\xdc\xd2\xf2\xb0\x8d\xeb\xd5\x05\xcb\x84\x96>\x04\xb6\xca\x02\x9f\x9bs\x1a\xe1\xeb\xa8\xf4i\xb2hR\xc6\x89\xbb\x1d\x95\xba\xb5\x89Q!7\x9f\x83\x15i\xfeY\xc6\x14-\xac\x81bl\xc90\xa6\xb5\xe0\x93S\x8c\xdf\xa6=\x14\xfaj\x95/\xd6\x0f\x14\x826\x1d\x94h6U\x95\xfa?8(o\xfc\x83\x18\x18\xe3\x94\xdf\x9e\x7fE\x9aK0\xb2\x83\xa5xL\xad\xb8\xcc\xd8\x8a\xfc\x01\x81!~\v\xd7S\x97\'\x9a\x1a\xb1\'\x15\xf1\xce3\x16\xe0\xd84\x01\xd5\x0f5\xd1\x10Q\x02\xe6\xbcq\x1fD\xb4\x9e{\xda\xb9\x02\xd3\xec\x9cg\v\xaaS[\x1eY\xdf\x839~\xf8/\xfa\xf3\xb5xQ\x03\x9aJ\x1c9\xd9\x04WvU\x19\x87\xdec\xf2i\x998^J\xbd\xf5C\xaf\xa7\xc7\x04\x96\x17\xf3\xd0\x12\xf6y\xf5\\G\xfd\xfbY\r\xe4\xbe\xfd\x85\x8f\xa3\x8bA\x11\xa4\xae30\x82\x06\xee\xd5\x14\xefS\x10\xc2\v\xd1\xf7\x00P\xd4y>\x8a&\x03\xe89s\xc8k\xbc\x8f@\xbe>\x1fX\x00~\xd8\x00=6\x0fe\n!2\xf1\xd6\xd8O{\xe7t\xca\xca3I\x0e\v\xf9\b\aG\xadgB\x0e\x154\xbc\\\x039\xf7\x9e\'\xd8m4\x9f \x7fx\t%\xfd\xda\x0fU!\x1a\x96>\rH\x93\xb4\xc7\x12\xe8\x19\xdf\xd7\xfe\xbae\x98\xaa\x19Y\x1c\x0f2\xce\x85\xb3\v*?\xf1\xbaj\x1c;i[\x98\xcc\x11\b\xe71:\x99\xcf\xb3\x9a\x8a\xd8\xd3n(;=)[\x8e\xa7m\xeaAT\v|6\xbet\x05m\x81\'_\xd95\xb3\x02\xb8\xf4O\x9a\xb5\x02\b\r\xb8\xcd5%\xdf\x87*\x84\xff\xb1OF\x01ECE\x02p\xd1\xd28\x18S?\xe1\xad,\'\x85\x85s\xe4RrD\xcef\xae\v\x936\xe2\xdc=C\x00g\xc9\xa7\xa4\xd8\x96\xef\x11 \xe5\xde\xd7a\xfem\xbd\xe0\xe4\xcc\xb9\xab\x12\xbe\x86\xa6e\x9cD\x91\x9e\xb9\xb3\x01Z\x98={\x14?<\xdf\xa0\x9e*\x02\xe1\x11\xf6\x1e@\'\x95\x0f\xf0\xec\x05\f\xaa\x82\x11\xd5/1L\x8f\xec=\xbf~q\x00T\xd1\xc8u%\xa3\x02\xc7\x12\x17\xb6\x80\x04\xe5\x11Y6o\xb8\xc2\xc9|\x8a\xdd\xe4\xd5\xab\xe1>\xcb\xe7\x18\x8b\xf4p\x0e.\xed\x85\xca\xba!\xc5L\xa46\x18\xc2\x03\xf1\x13\x1b]\xb1,\xffJF\x19\xd7w3\x9fiN\xb7\xdeE\xf9\xbd3)\xee\x93v\xd9\x10 x%\x8dANZ\xdd\x96p\xf6!su\xe7^\xb2\xf6\xd2\x82\xfe\xea\x18\x92J\xe5\xb9T\x1c\xf3\xaf\xa6\xe84G\xd8Y?\x83\xc1\x9c\x8b\xc4f:\x0f\xe0\x93\x9d\xae\x01\xb3;\x80-\x1c\x01\xe4\v(\xc3L\x03\xa6\"\xb1\x963\xebks\x1a\x0f\xe2\xe5\xcd_\xdb\xc0\xd6p\xc6\xdf< \x9dC&[v\x97D~Y\x16L\x1b\xfa\xdd\x94\xbc\x04\bV?\xd9a\xf4\x15\xfd^)\x86\xd9S\x88`4\xeb\xf6H\xdd\xba=', 0x2) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x8006162) 17:45:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000dc0)=[{&(0x7f00000005c0)=""/102, 0x66}], 0x1, 0x4b, 0x0) 17:45:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x562eac7d}], 0x0, &(0x7f0000000680)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 86.775499][ T4411] loop4: detected capacity change from 0 to 512 [ 86.803632][ T4411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.868010][ T4422] loop3: detected capacity change from 0 to 264192 17:45:17 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:17 executing program 5: keyctl$KEYCTL_MOVE(0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 17:45:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 17:45:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 17:45:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x562eac7d}], 0x0, &(0x7f0000000680)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 17:45:17 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) [ 89.603689][ T4430] loop1: detected capacity change from 0 to 512 [ 89.604801][ T4431] loop3: detected capacity change from 0 to 264192 [ 89.610415][ T4432] loop4: detected capacity change from 0 to 512 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xf7fffdc5, 0x0, 0x0, 0xfff7, 0x0, "38007b7b008f1200000000000052400f1300"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x38) 17:45:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 17:45:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x24}}, 0x0) 17:45:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 89.655318][ T4432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.655370][ T4430] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 17:45:18 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) 17:45:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xeb) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c51) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') lseek(r1, 0xfff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getdents64(r1, 0x0, 0x0) [ 89.735273][ T4453] loop4: detected capacity change from 0 to 512 [ 89.755597][ T4456] loop1: detected capacity change from 0 to 512 [ 89.763040][ T4457] tmpfs: Bad value for 'mpol' 17:45:18 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) [ 89.777997][ T4456] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.779509][ T22] kauditd_printk_skb: 2 callbacks suppressed [ 89.779519][ T22] audit: type=1400 audit(1634665518.166:348): avc: denied { watch watch_reads } for pid=4463 comm="syz-executor.3" path="/proc/4463" dev="proc" ino=15740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.818990][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 17:45:18 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 17:45:18 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9207c, &(0x7f0000000100)={[{@delalloc}]}) 17:45:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 89.839307][ T4469] tmpfs: Bad value for 'mpol' 17:45:18 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) 17:45:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000000000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 17:45:18 executing program 0: r0 = getpid() move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 89.869092][ T4476] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue. Quota mode: none. [ 89.888433][ T4479] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue. Quota mode: none. 17:45:18 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) [ 89.933731][ T4481] tmpfs: Bad value for 'mpol' 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) [ 89.992728][ T4485] loop1: detected capacity change from 0 to 512 [ 90.019303][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 17:45:18 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000140)=@v2, 0x14, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x3, 0x8, 0x0) mremap(&(0x7f0000196000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000090f000/0x3000)=nil) mbind(&(0x7f0000bd4000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000597000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000283000/0x3000)=nil, 0x3000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) 17:45:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) [ 90.050523][ T4492] loop4: detected capacity change from 0 to 512 [ 90.074275][ T4492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 17:45:18 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000000c0)=[{0x6}]}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80800) ppoll(&(0x7f0000000540)=[{r0, 0x400}, {r1, 0x100}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xc104}, {r0, 0x440}], 0x5, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x7]}, 0x8) 17:45:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\"\'\x00') [ 90.116500][ T4495] tmpfs: Bad value for 'mpol' 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 17:45:18 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6002, 0x1) set_mempolicy(0x1, 0x0, 0x0) clone(0x26020900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ext3\x00', 0x0, 0x0) 17:45:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) [ 90.188187][ T22] audit: type=1400 audit(1634665518.566:349): avc: denied { name_bind } for pid=4499 comm="syz-executor.2" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.210449][ T22] audit: type=1400 audit(1634665518.576:350): avc: denied { node_bind } for pid=4499 comm="syz-executor.2" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.332561][ T22] audit: type=1400 audit(1634665518.716:351): avc: denied { create } for pid=4510 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 17:45:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x227f, &(0x7f0000001380)) 17:45:18 executing program 1: r0 = socket$inet(0xa, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f0000000240)={0xffff80fe, @ax25={0x3, @default, 0x2}, @nfc, @rc={0x1f, @fixed}}) 17:45:18 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 17:45:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000d8c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x90e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xa) 17:45:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) [ 90.360220][ T22] audit: type=1326 audit(1634665518.746:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8a97b8a39 code=0x0 [ 90.362487][ T4513] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 90.383557][ T22] audit: type=1400 audit(1634665518.746:353): avc: denied { mounton } for pid=4510 comm="syz-executor.0" path="/root/syzkaller-testdir858854496/syzkaller.MwiAdI/61/file0" dev="sda1" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 90.403907][ T4513] EXT4-fs (loop1): unable to read superblock [ 90.482324][ T22] audit: type=1400 audit(1634665518.866:354): avc: denied { unlink } for pid=503 comm="syz-executor.0" name="file0" dev="sda1" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 17:45:18 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$cont(0x4207, r0, 0x0, 0x0) 17:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b3a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "60968b820800478b"}) 17:45:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x200000000000034f) inotify_init() r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) dup3(r1, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x5}, 0x8, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000280)={r4, 0x2, 0x800, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) 17:45:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@generic="580b957c9a"]}, 0x1c}}, 0x0) 17:45:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 17:45:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, 0x0) 17:45:19 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x10050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) clone(0x100, &(0x7f0000000040)="431737ce8788c16ea6102ad13847c729fec34a1650f4b2ae0f8777c1297b7dc268e1bfa00e9a573168a2", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="7d7dcc2fbf14e2fecefc7e7100aa2a82e14057bc1f4cbf7add6356cbe01804573c0de112ec4b4d1b00b9529d038e7561bbb0d8309f85c56d478962021c1e3ba0b8b3f3e3ce93f702af6ee43ef8d7190b2dc0108917c8ca9d0aabb9823b2c0dc6a092938c1c07a9b97ce3f4") [ 91.168985][ T22] audit: type=1326 audit(1634665519.556:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8a97b8a39 code=0x0 17:45:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000500)) rt_sigtimedwait(&(0x7f0000000440), 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) 17:45:19 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}, 0x10) [ 91.251896][ C1] sd 0:0:1:0: tag#7794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 91.261749][ C1] sd 0:0:1:0: tag#7794 CDB: opcode=0xe5 (vendor) [ 91.268088][ C1] sd 0:0:1:0: tag#7794 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 91.277192][ C1] sd 0:0:1:0: tag#7794 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 91.286430][ C1] sd 0:0:1:0: tag#7794 CDB[20]: ba [ 91.292495][ T4544] device lo entered promiscuous mode 17:45:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2101) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="627097b83821df1e07433a049dce2826d4b3bd6a788f6d659a6af74358affb1d92b3a0b54b0bacf8716a489739bc", 0x2e}], 0x1) [ 91.301044][ T4544] Y­4`Ò˜: renamed from lo [ 91.309805][ C1] sd 0:0:1:0: tag#7744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 91.313695][ T22] audit: type=1400 audit(1634665519.696:356): avc: denied { module_request } for pid=4538 comm="syz-executor.3" kmod="netdev-lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.319684][ C1] sd 0:0:1:0: tag#7744 CDB: opcode=0xe5 (vendor) 17:45:19 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)="ca", 0x1}, {&(0x7f0000000300)="f8a9", 0x2}], 0x2) [ 91.319720][ C1] sd 0:0:1:0: tag#7744 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 91.319738][ C1] sd 0:0:1:0: tag#7744 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 91.366548][ C1] sd 0:0:1:0: tag#7744 CDB[20]: ba 17:45:19 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$cont(0x4207, r0, 0x0, 0x0) 17:45:19 executing program 4: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000200)) 17:45:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffa1}) [ 91.457490][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.467786][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2101) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="627097b83821df1e07433a049dce2826d4b3bd6a788f6d659a6af74358affb1d92b3a0b54b0bacf8716a489739bc", 0x2e}], 0x1) 17:45:19 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x7000) munlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 17:45:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x43}) 17:45:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2101) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="627097b83821df1e07433a049dce2826d4b3bd6a788f6d659a6af74358affb1d92b3a0b54b0bacf8716a489739bc", 0x2e}], 0x1) 17:45:20 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x0) [ 91.607826][ T4577] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.701228][ T4587] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.717700][ T22] audit: type=1400 audit(1634665520.096:357): avc: denied { wake_alarm } for pid=4586 comm="syz-executor.0" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 17:45:20 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000500)) rt_sigtimedwait(&(0x7f0000000440), 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) 17:45:20 executing program 3: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)) chdir(&(0x7f0000000380)='./bus\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r0, r1, 0x0, 0x201000) 17:45:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2101) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="627097b83821df1e07433a049dce2826d4b3bd6a788f6d659a6af74358affb1d92b3a0b54b0bacf8716a489739bc", 0x2e}], 0x1) 17:45:20 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000001a0007881dfffd946f6105000a0003e8fe0208010001080008000200ac141416", 0x24}], 0x1}, 0x0) 17:45:20 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$cont(0x4207, r0, 0x0, 0x0) 17:45:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x81080, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2811406, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1010c0, 0x0) 17:45:20 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}]}, 0x34}}, 0x0) 17:45:20 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4005ef3) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000000)="01", 0x1}]) fallocate(r0, 0x20, 0x0, 0x106000000) 17:45:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_opts(r0, 0x11, 0x0, 0x0, 0x0) 17:45:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f9e}}, @flowinfo={{0x14}}, @dontfrag={{0x14}}], 0x48}}], 0x1, 0x0) 17:45:20 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:21 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000500)) rt_sigtimedwait(&(0x7f0000000440), 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) 17:45:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f9e}}, @flowinfo={{0x14}}, @dontfrag={{0x14}}], 0x48}}], 0x1, 0x0) 17:45:21 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:21 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 17:45:21 executing program 5: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$cont(0x4207, r0, 0x0, 0x0) 17:45:21 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f9e}}, @flowinfo={{0x14}}, @dontfrag={{0x14}}], 0x48}}], 0x1, 0x0) 17:45:21 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:21 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:21 executing program 2: unshare(0x600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt(r0, 0x107, 0x13, 0x0, 0x0) 17:45:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f9e}}, @flowinfo={{0x14}}, @dontfrag={{0x14}}], 0x48}}], 0x1, 0x0) 17:45:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5500000018007f09c0fe15b282a380930a60000200a84302916d0200390005003500ff6c0200000015000500fc000000070b566881b18432119b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) 17:45:22 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000500)) rt_sigtimedwait(&(0x7f0000000440), 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) 17:45:22 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x11) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380), 0x4, 0x0) 17:45:22 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 17:45:22 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x6f8b, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)) 17:45:22 executing program 3: r0 = inotify_init() r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x208) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000000)='./file0\x00', 0x0) 17:45:22 executing program 5: set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 17:45:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x87) sendmmsg$sock(r0, &(0x7f0000001780)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="d2af95f3", 0x4}], 0x1, 0x0, 0x0, 0xfe80}}], 0x1, 0x910) 17:45:22 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x6f8b, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)) 17:45:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100) sendto(r0, 0x0, 0x4000, 0x0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 17:45:22 executing program 0: r0 = syz_io_uring_setup(0x550, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000749000/0x14000)=nil, &(0x7f0000544000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 17:45:22 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x6f8b, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)) 17:45:23 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x6f8b, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)) 17:45:23 executing program 3: r0 = fork() waitid(0x0, 0x0, 0x0, 0x41000006, &(0x7f0000000080)) tkill(r0, 0x22) 17:45:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x76}, @val={0xc}}}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x48}}, 0x0) 17:45:23 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x4, 0x19}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_ZONE={0x6}]}, 0x28}}, 0x0) 17:45:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000018007f0200fe15b29ca380930a03000248a84302916d020039000500fec0ffff070b566881b16af634daec8432009b1100b1df13000000fb0000400014000040970de3a300000000090000000000000000", 0x55}], 0x1}, 0x0) 17:45:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xe261b4a5620bc695}, [@CTA_MARK_MASK={0x8, 0x1a}]}, 0x1c}}, 0x0) 17:45:23 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f00000002c0), 0x10) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 17:45:23 executing program 0: set_mempolicy(0x1, &(0x7f0000003240)=0x1979, 0x4) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x2, 0x6, @dev}, 0x10) [ 95.282962][ T4694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4694 comm=syz-executor.2 17:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:23 executing program 3: r0 = fork() waitid(0x0, 0x0, 0x0, 0x41000006, &(0x7f0000000080)) tkill(r0, 0x22) 17:45:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000018007f0200fe15b29ca380930a03000248a84302916d020039000500fec0ffff070b566881b16af634daec8432009b1100b1df13000000fb0000400014000040970de3a300000000090000000000000000", 0x55}], 0x1}, 0x0) 17:45:23 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f00000002c0), 0x10) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 17:45:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:23 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='./file0\x00', r1) [ 95.427021][ T4708] device lo entered promiscuous mode [ 95.432511][ T4705] device lo left promiscuous mode [ 95.438313][ T4708] device lo entered promiscuous mode [ 95.443983][ T4705] device lo left promiscuous mode 17:45:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000018007f0200fe15b29ca380930a03000248a84302916d020039000500fec0ffff070b566881b16af634daec8432009b1100b1df13000000fb0000400014000040970de3a300000000090000000000000000", 0x55}], 0x1}, 0x0) 17:45:23 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f00000002c0), 0x10) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 17:45:23 executing program 3: r0 = fork() waitid(0x0, 0x0, 0x0, 0x41000006, &(0x7f0000000080)) tkill(r0, 0x22) 17:45:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x26e1, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@ceph_nfs_fh={0x8, 0x1, {0xb}}, 0x129000) 17:45:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000018007f0200fe15b29ca380930a03000248a84302916d020039000500fec0ffff070b566881b16af634daec8432009b1100b1df13000000fb0000400014000040970de3a300000000090000000000000000", 0x55}], 0x1}, 0x0) 17:45:24 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f00000002c0), 0x10) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 17:45:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:24 executing program 0: unshare(0x6c060000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000a00ea1100000005000000", 0x29}], 0x1) 17:45:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) dup3(r1, r2, 0x0) 17:45:24 executing program 3: r0 = fork() waitid(0x0, 0x0, 0x0, 0x41000006, &(0x7f0000000080)) tkill(r0, 0x22) 17:45:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1}, {0xa4}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 17:45:24 executing program 1: unshare(0x2a000400) r0 = fork() fcntl$getown(0xffffffffffffffff, 0x9) fork() rt_sigqueueinfo(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:45:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5602, &(0x7f0000000040)) [ 96.343982][ T4747] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 96.354489][ T4751] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 17:45:24 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)={0x1e98c2}, 0x18) setxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB='security./dev/sne/s'], 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2, 0x14, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000002fc0)='R', 0x1}], 0x1) 17:45:24 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 17:45:24 executing program 0: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='}-$\x00', 0x0) 17:45:24 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@mss={0x2, 0x5}, @sack_perm, @timestamp, @sack_perm], 0x4) syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 96.548088][ T4774] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 96.558771][ T22] kauditd_printk_skb: 3 callbacks suppressed [ 96.558783][ T22] audit: type=1400 audit(1634665524.946:361): avc: denied { relabelto } for pid=4767 comm="syz-executor.3" name="file0" dev="sda1" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fixed_disk_device_t:s0" [ 96.592267][ T22] audit: type=1400 audit(1634665524.966:362): avc: denied { setattr } for pid=4767 comm="syz-executor.3" name="file0" dev="sda1" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fixed_disk_device_t:s0" [ 96.619587][ T22] audit: type=1400 audit(1634665524.976:363): avc: denied { write } for pid=4767 comm="syz-executor.3" path="/root/syzkaller-testdir747904401/syzkaller.VjKBh1/101/file0" dev="sda1" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fixed_disk_device_t:s0" [ 96.651332][ T22] audit: type=1400 audit(1634665525.036:364): avc: denied { unlink } for pid=510 comm="syz-executor.3" name="file0" dev="sda1" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fixed_disk_device_t:s0" 17:45:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:45:25 executing program 1: unshare(0x2a000400) r0 = fork() fcntl$getown(0xffffffffffffffff, 0x9) fork() rt_sigqueueinfo(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:45:25 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 17:45:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = semget$private(0x0, 0x3, 0x198) semop(r1, &(0x7f0000000040)=[{0x0, 0x6}, {}], 0x2) semop(r1, &(0x7f0000000080)=[{}, {0x1, 0xfffc}], 0x2) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}], 0x1) 17:45:25 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 17:45:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x2}, {0x7c}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 17:45:25 executing program 0: r0 = gettid() prlimit64(r0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 17:45:25 executing program 1: unshare(0x2a000400) r0 = fork() fcntl$getown(0xffffffffffffffff, 0x9) fork() rt_sigqueueinfo(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:45:25 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 17:45:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) [ 97.403012][ T22] audit: type=1326 audit(1634665525.786:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4801 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff88c29ea39 code=0x0 17:45:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x2c}, {0x5}, {0x6}]}, 0x10) r2 = dup2(r0, r0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:45:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000480)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 17:45:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgid(0x0) tgkill(r0, r0, 0x0) 17:45:26 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 17:45:26 executing program 1: unshare(0x2a000400) r0 = fork() fcntl$getown(0xffffffffffffffff, 0x9) fork() rt_sigqueueinfo(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:45:26 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x6, 0x1e, &(0x7f0000000000)={0x3, {{0x2, 0x0, @remote}}}, 0x6b) 17:45:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@x25, 0x20000000) 17:45:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:45:26 executing program 1: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={[{@size={'size', 0x3d, [0x38, 0x54]}}]}) 17:45:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:26 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) writev(r0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000500)="de", 0x1}], 0x3) 17:45:26 executing program 5: r0 = epoll_create(0x100) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000010c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 17:45:26 executing program 3: ustat(0x801, &(0x7f0000000040)) 17:45:26 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0xfffffcb5}}, @txtime={{0x18}}, @txtime={{0x18}}], 0x48}}], 0x2, 0x0) [ 98.375930][ T22] audit: type=1400 audit(1634665526.756:366): avc: denied { write } for pid=4846 comm="syz-executor.4" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 98.400394][ T4850] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000040), 0x24, 0x0) chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=""/167, 0xa7) [ 98.404698][ T22] audit: type=1400 audit(1634665526.786:367): avc: denied { read } for pid=4846 comm="syz-executor.4" name="autofs" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.433122][ T22] audit: type=1400 audit(1634665526.786:368): avc: denied { open } for pid=4846 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 17:45:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[], 0x90) 17:45:26 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xb4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc4}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 17:45:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x4f36, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006100)=""/102387, 0x18ff3}}], 0x1, 0x0, 0x0) [ 98.460984][ T22] audit: type=1400 audit(1634665526.846:369): avc: denied { open } for pid=4846 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.463753][ T4850] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.480524][ T22] audit: type=1400 audit(1634665526.846:370): avc: denied { kernel } for pid=4846 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 17:45:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4, 0x800, 0x2, 0x0, 0x0, 0x600, 0x6}, 0x20) 17:45:27 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000240)="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", 0x5c9, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) [ 98.639383][ T4870] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.648967][ T4869] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.672616][ C0] sd 0:0:1:0: tag#7802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 98.682583][ C0] sd 0:0:1:0: tag#7802 CDB: opcode=0xe5 (vendor) 17:45:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:27 executing program 5: r0 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1}, 0x6) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x434c, &(0x7f00000000c0), &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x301, 0x0, 0x0, 0x0, 0x0) [ 98.689023][ C0] sd 0:0:1:0: tag#7802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.698056][ C0] sd 0:0:1:0: tag#7802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.707195][ C0] sd 0:0:1:0: tag#7802 CDB[20]: ba 17:45:27 executing program 1: fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) fallocate(r0, 0x100000003, 0x0, 0x80019c) lseek(r0, 0x0, 0x3) 17:45:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 17:45:27 executing program 5: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="38000000180003041dfffd946f6105000214010a1f0300050c10080008001e0002000000140009001a00ffffba16a0aa1c09000000080000", 0x38}], 0x1}, 0x0) [ 98.861728][ T4890] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.877072][ T4891] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 17:45:27 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xb4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc4}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 17:45:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7fff, 0x1000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="900000001c001f4d154a817393278bff0a808f78020000006c36710414000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf46d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500de1df32c1739d7fbee9aa2417318e9e0b390100000000000000000", 0x90, 0x0, 0x0, 0xfffffffffffffde0) 17:45:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 17:45:27 executing program 5: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x8) 17:45:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x35}, {0x4c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:45:27 executing program 1: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = memfd_create(&(0x7f0000000040)='U:\x00\xbcN\x8aH2\x12~KH\b\x1c\xf9j.\x91\x10\xc7\x85\xfd\xec9\xbd\xe0\xcc\x9b\x1a\x1a\x9f\xfd\xa6\x80\x8d\x11\"\x1f^\x13.\xda\x9c-j\a\x1b\x00', 0x4) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 17:45:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 17:45:27 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)=ANY=[@ANYBLOB="1b"]) 17:45:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 17:45:27 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 99.552193][ T4912] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.563776][ T4914] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)=ANY=[@ANYBLOB="1b"]) 17:45:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xb4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc4}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 17:45:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 17:45:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) [ 99.678645][ C0] sd 0:0:1:0: tag#7798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 99.688677][ C0] sd 0:0:1:0: tag#7798 CDB: opcode=0xe5 (vendor) [ 99.695044][ C0] sd 0:0:1:0: tag#7798 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 99.704219][ C0] sd 0:0:1:0: tag#7798 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 99.713250][ C0] sd 0:0:1:0: tag#7798 CDB[20]: ba 17:45:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)=ANY=[@ANYBLOB="1b"]) 17:45:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 17:45:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp, @can, @l2tp={0x2, 0x0, @loopback}}) 17:45:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) getsockopt$bt_hci(r0, 0x11, 0x1, 0x0, &(0x7f0000000180)) 17:45:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ff", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRESOCT=r1, @ANYBLOB="000127bd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040890}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="99bc7b3f79a068623d96a74e9c8a0541a973b5bf9e0bf48cc4b0141aac8062dc9e69e12cf87351fff33885b96b8cbde9034a", 0x32, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xb4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc4}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x28}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone(0x204000, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918bb0f58404ca9b470ed0ae1c689aac06cd7", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") 17:45:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)=ANY=[@ANYBLOB="1b"]) 17:45:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 17:45:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) r1 = socket(0x11, 0x3, 0x0) sendmsg(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@hci={0x1f, 0x6488, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="f254294737bb0057", 0x5c8}], 0x1}, 0x0) [ 99.831715][ C0] sd 0:0:1:0: tag#7765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 99.841607][ C0] sd 0:0:1:0: tag#7765 CDB: opcode=0xe5 (vendor) [ 99.847966][ C0] sd 0:0:1:0: tag#7765 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 99.856998][ C0] sd 0:0:1:0: tag#7765 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 99.866029][ C0] sd 0:0:1:0: tag#7765 CDB[20]: ba 17:45:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 17:45:28 executing program 3: unshare(0x20020600) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x8982, 0x0) 17:45:28 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{}, {}, 0x0, 0x3}) 17:45:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}}, 0x0) write$binfmt_elf64(r2, &(0x7f00000012c0)=ANY=[], 0xa) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f", 0x7) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 17:45:28 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 99.992342][ C1] sd 0:0:1:0: tag#7780 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.002183][ C1] sd 0:0:1:0: tag#7780 CDB: opcode=0xe5 (vendor) [ 100.008965][ C1] sd 0:0:1:0: tag#7780 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.017978][ C1] sd 0:0:1:0: tag#7780 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.027158][ C1] sd 0:0:1:0: tag#7780 CDB[20]: ba 17:45:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 17:45:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 17:45:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0xe, 0x4) 17:45:28 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80082407, 0xffffffffffffffff) 17:45:28 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)) 17:45:28 executing program 2: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x100000000000000}, 0x600, 0x0, 0xff, 0x1}, 0x20) 17:45:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 17:45:28 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 17:45:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) [ 100.297103][ T5002] loop2: detected capacity change from 0 to 87 [ 100.320798][ C0] sd 0:0:1:0: tag#7745 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.331083][ C0] sd 0:0:1:0: tag#7745 CDB: opcode=0xe5 (vendor) [ 100.337571][ C0] sd 0:0:1:0: tag#7745 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:45:28 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) inotify_init1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./control\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 100.346613][ C0] sd 0:0:1:0: tag#7745 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.355760][ C0] sd 0:0:1:0: tag#7745 CDB[20]: ba 17:45:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) [ 100.392221][ C1] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.402216][ C1] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 100.408550][ C1] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.417658][ C1] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.426850][ C1] sd 0:0:1:0: tag#7788 CDB[20]: ba 17:45:28 executing program 3: futex(&(0x7f0000002100), 0x5, 0x0, 0x0, &(0x7f0000002180), 0x11000000) [ 100.569914][ C0] sd 0:0:1:0: tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.579784][ C0] sd 0:0:1:0: tag#7803 CDB: opcode=0xe5 (vendor) [ 100.586130][ C0] sd 0:0:1:0: tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.595182][ C0] sd 0:0:1:0: tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.604320][ C0] sd 0:0:1:0: tag#7803 CDB[20]: ba 17:45:29 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) [ 100.614504][ T5007] syz-executor.5 (5007) used greatest stack depth: 11072 bytes left 17:45:29 executing program 3: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 17:45:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0xffffffff}, {0x16}]}) syz_open_dev$loop(0x0, 0x0, 0x0) [ 100.723223][ C0] sd 0:0:1:0: tag#7802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.733181][ C0] sd 0:0:1:0: tag#7802 CDB: opcode=0xe5 (vendor) [ 100.739605][ C0] sd 0:0:1:0: tag#7802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 100.748804][ C0] sd 0:0:1:0: tag#7802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 100.757828][ C0] sd 0:0:1:0: tag#7802 CDB[20]: ba 17:45:29 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 101.189020][ C1] sd 0:0:1:0: tag#7806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 101.198888][ C1] sd 0:0:1:0: tag#7806 CDB: opcode=0xe5 (vendor) [ 101.205208][ C1] sd 0:0:1:0: tag#7806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 101.214223][ C1] sd 0:0:1:0: tag#7806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 101.223241][ C1] sd 0:0:1:0: tag#7806 CDB[20]: ba 17:45:29 executing program 2: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:29 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) inotify_init1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./control\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 101.234590][ T5002] syz-executor.2 (5002) used greatest stack depth: 10400 bytes left 17:45:29 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 17:45:29 executing program 3: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 17:45:29 executing program 3: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 17:45:29 executing program 0: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:29 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) inotify_init1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./control\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:29 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/38, 0x26, 0x0, &(0x7f0000000280)=@rc={0x1f, @fixed, 0x8}, 0x80) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000010000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000002000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) [ 101.303671][ C0] sd 0:0:1:0: tag#7804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 101.313689][ C0] sd 0:0:1:0: tag#7804 CDB: opcode=0xe5 (vendor) [ 101.320042][ C0] sd 0:0:1:0: tag#7804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 101.329087][ C0] sd 0:0:1:0: tag#7804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 101.338170][ C0] sd 0:0:1:0: tag#7804 CDB[20]: ba [ 101.379326][ T5068] loop2: detected capacity change from 0 to 87 17:45:29 executing program 3: unshare(0x4a060480) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x6) unshare(0x400) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x402, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="101be6100d1af6c65b19782c1e45ecee3316a8d0da14e3367551a4decf00aecdffde69e58e0d95674900000000000000000000000000e900003f82e1d52980d6fbbf25c780adec0cc534ca983739872c07c5f3abce5c465077a4e235250e579d5c93eac7"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r5 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x800) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "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", "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"}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @private}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @hci={0x1f, 0x0, 0x4}, 0xcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo\x00\x96%8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\f\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 101.422581][ T5070] loop0: detected capacity change from 0 to 87 17:45:29 executing program 5: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='nolazytime\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) [ 101.587987][ T5080] device lo entered promiscuous mode [ 101.616908][ T22] kauditd_printk_skb: 30 callbacks suppressed 17:45:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$TCSETSW(r0, 0x4b6a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ed7da40b206f3ff32622476d1819baad468f94"}) 17:45:30 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x7ff, 0x3ff}) [ 101.616920][ T22] audit: type=1326 audit(1634665529.996:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b14626a39 code=0x0 [ 101.890142][ T5070] ================================================================== [ 101.898269][ T5070] BUG: KCSAN: data-race in jbd2_journal_commit_transaction / jbd2_log_wait_commit [ 101.907454][ T5070] [ 101.909802][ T5070] write to 0xffff888102bc4468 of 4 bytes by task 345 on cpu 0: [ 101.917535][ T5070] jbd2_journal_commit_transaction+0x2ad5/0x3430 [ 101.923865][ T5070] kjournald2+0x268/0x490 [ 101.928184][ T5070] kthread+0x262/0x280 [ 101.932234][ T5070] ret_from_fork+0x1f/0x30 [ 101.936734][ T5070] [ 101.939043][ T5070] read to 0xffff888102bc4468 of 4 bytes by task 5070 on cpu 1: [ 101.946559][ T5070] jbd2_log_wait_commit+0xb3/0x210 [ 101.951652][ T5070] jbd2_complete_transaction+0x101/0x110 [ 101.957281][ T5070] ext4_fc_commit+0x24e/0x14c0 [ 101.962028][ T5070] ext4_sync_file+0x336/0x670 [ 101.966730][ T5070] vfs_fsync_range+0x107/0x120 [ 101.971480][ T5070] ext4_buffered_write_iter+0x3af/0x400 [ 101.977020][ T5070] ext4_file_write_iter+0x2e7/0x11f0 [ 101.982281][ T5070] do_iter_readv_writev+0x2de/0x380 [ 101.987458][ T5070] do_iter_write+0x192/0x5c0 [ 101.992030][ T5070] vfs_iter_write+0x4c/0x70 [ 101.996527][ T5070] iter_file_splice_write+0x43a/0x790 [ 102.001887][ T5070] direct_splice_actor+0x80/0xa0 [ 102.006803][ T5070] splice_direct_to_actor+0x345/0x650 [ 102.012152][ T5070] do_splice_direct+0x106/0x190 [ 102.016993][ T5070] do_sendfile+0x63e/0xbb0 [ 102.021404][ T5070] __x64_sys_sendfile64+0x102/0x140 [ 102.026671][ T5070] do_syscall_64+0x44/0xa0 [ 102.031069][ T5070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 102.036948][ T5070] [ 102.039249][ T5070] value changed: 0x00000465 -> 0x00000466 [ 102.044952][ T5070] [ 102.047268][ T5070] Reported by Kernel Concurrency Sanitizer on: [ 102.053404][ T5070] CPU: 1 PID: 5070 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 102.062066][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.072112][ T5070] ================================================================== 17:45:30 executing program 2: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8001) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffa2}) 17:45:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300034700bb0ae1c3e4ffff06000000010000004500000025000000190016000400ad000200000000000006040000000000000000", 0x39}, {0x0}], 0x2) 17:45:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') lseek(r0, 0xa3, 0x0) 17:45:30 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 17:45:30 executing program 0: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:30 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) inotify_init1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./control\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:30 executing program 5: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 17:45:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300034700bb0ae1c3e4ffff06000000010000004500000025000000190016000400ad000200000000000006040000000000000000", 0x39}, {0x0}], 0x2) [ 102.327604][ T5104] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:45:30 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb16, 0x4) 17:45:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@generic="56de3ccbb665669c3d1bd4751a639844ab"]}, 0x24}, {&(0x7f0000000740)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, @generic="388554fa9955", @generic="cf5579"]}, 0x28}, {&(0x7f0000002200)={0x10, 0x13}, 0x10}, {&(0x7f0000000700)={0x10, 0x25}, 0x10}], 0x4}, 0x0) 17:45:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300034700bb0ae1c3e4ffff06000000010000004500000025000000190016000400ad000200000000000006040000000000000000", 0x39}, {0x0}], 0x2) [ 102.449718][ T5120] loop2: detected capacity change from 0 to 87 [ 102.515570][ T22] audit: type=1400 audit(1634665530.896:402): avc: denied { setopt } for pid=5125 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 102.549190][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 102.558617][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 102.562344][ T5130] loop0: detected capacity change from 0 to 87 17:45:31 executing program 2: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:31 executing program 4: setresuid(0xee01, 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0xee01, r0, 0x0) setrlimit(0xd, &(0x7f00000000c0)={0x0, 0x7}) 17:45:31 executing program 5: r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='rootcontext', &(0x7f0000000140)="fe", 0x1) 17:45:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300034700bb0ae1c3e4ffff06000000010000004500000025000000190016000400ad000200000000000006040000000000000000", 0x39}, {0x0}], 0x2) 17:45:31 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 17:45:31 executing program 0: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000006661", 0xa}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0), 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) creat(0x0, 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:45:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af3", 0x2a, 0x4800}], 0x0, &(0x7f00000000c0)=ANY=[]) 17:45:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresgid(0xee01, 0x0, 0x0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') exit(0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1, 0x0, 0x0) 17:45:31 executing program 3: unshare(0x22060400) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') lseek(r0, 0x0, 0x0) [ 103.505289][ T5150] loop5: detected capacity change from 0 to 4096 [ 103.525887][ T5150] EXT4-fs error (device loop5): ext4_ext_check_inode:460: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 103.544270][ T5150] EXT4-fs error (device loop5): ext4_quota_enable:6315: comm syz-executor.5: Bad quota inode # 3 [ 103.555266][ T5150] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 103.570002][ T5150] EXT4-fs (loop5): mount failed [ 103.573114][ T22] audit: type=1400 audit(1634665531.956:403): avc: denied { dac_override } for pid=5156 comm="syz-executor.4" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 17:45:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) [ 103.596358][ T22] audit: type=1400 audit(1634665531.956:404): avc: denied { sys_ptrace } for pid=5149 comm="syz-executor.4" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 103.646137][ T5159] loop2: detected capacity change from 0 to 87 [ 103.666326][ T5150] loop5: detected capacity change from 0 to 4096 [ 103.680697][ T5150] EXT4-fs error (device loop5): ext4_ext_check_inode:460: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 103.698418][ T5150] EXT4-fs error (device loop5): ext4_quota_enable:6315: comm syz-executor.5: Bad quota inode # 3 [ 103.709280][ T5150] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 103.723653][ T5150] EXT4-fs (loop5): mount failed [ 103.729366][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 103.729383][ C1] sd 0:0:1:0: tag#7797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:45:32 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 103.745989][ C1] sd 0:0:1:0: tag#7797 CDB: opcode=0xe5 (vendor) [ 103.752328][ C1] sd 0:0:1:0: tag#7797 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.761474][ C1] sd 0:0:1:0: tag#7797 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.770606][ C1] sd 0:0:1:0: tag#7797 CDB[20]: ba 17:45:32 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000018c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfffffff, &(0x7f0000001940)=""/25}, &(0x7f0000000200)="e5f432732f4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:45:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a00000079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@grpjquota, 0x32}, {@dioread_nolock}, {@grpquota}]}) [ 103.901667][ T5166] loop0: detected capacity change from 0 to 87 [ 103.943942][ C1] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 103.953959][ C1] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 103.960335][ C1] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.969366][ C1] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.978417][ C1] sd 0:0:1:0: tag#7788 CDB[20]: ba 17:45:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) time(0x0) 17:45:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000015c0)=0xff) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800e35b, 0x0, "aebb6488c5cd58d28012572b09772224033449"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 17:45:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 17:45:33 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) sched_setattr(0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 17:45:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @local, @dev}) 17:45:33 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:33 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 17:45:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:33 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x11000c43) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup/syz1\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) [ 104.801883][ T5166] syz-executor.0 (5166) used greatest stack depth: 10368 bytes left [ 104.841329][ T5192] loop2: detected capacity change from 0 to 1019 [ 104.869501][ T5192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.881399][ T22] audit: type=1400 audit(1634665533.266:405): avc: denied { write } for pid=5188 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.883615][ T5192] EXT4-fs error (device loop2): ext4_empty_dir:3011: inode #12: block 255: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 104.903357][ T22] audit: type=1400 audit(1634665533.266:406): avc: denied { remove_name } for pid=5188 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.923544][ T5192] EXT4-fs warning (device loop2): ext4_empty_dir:3013: inode #12: comm syz-executor.2: directory missing '.' 17:45:33 executing program 2: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000), 0x80, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000003380)=""/4112, 0x1010}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/116, 0x40}], 0x7, &(0x7f00000008c0)=""/8, 0x8}, 0xfe}], 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000002dc0)) r3 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@llc, 0x80, &(0x7f0000001000)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/243, 0xf3}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/137, 0x89}], 0xa, &(0x7f0000001080)=""/236, 0xec}, 0x2}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f00000012c0)=""/21, 0x15}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/169, 0xa9}], 0x9}, 0x7f}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/83, 0x53}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/217, 0xd9}, {&(0x7f0000002ac0)=""/142, 0x8e}, {&(0x7f0000002b80)=""/234, 0xea}], 0x7, &(0x7f0000002cc0)=""/19, 0x13}, 0x4}], 0x3, 0x10021, &(0x7f0000002d80)={0x77359400}) preadv(r1, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000170a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 104.946208][ T22] audit: type=1400 audit(1634665533.266:407): avc: denied { rmdir } for pid=5188 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.957951][ T5192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:399: comm syz-executor.2: bg 0: block 3: invalid block bitmap [ 104.994498][ T5192] EXT4-fs error (device loop2) in ext4_free_blocks:6109: Corrupt filesystem [ 105.004004][ T5192] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz-executor.2: bit already cleared for inode 12 17:45:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "bea1"}]}}}], 0x18}}], 0x1, 0x0) 17:45:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "bea1"}]}}}], 0x18}}], 0x1, 0x0) 17:45:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 17:45:33 executing program 2: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000), 0x80, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000003380)=""/4112, 0x1010}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/116, 0x40}], 0x7, &(0x7f00000008c0)=""/8, 0x8}, 0xfe}], 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000002dc0)) r3 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@llc, 0x80, &(0x7f0000001000)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/243, 0xf3}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/137, 0x89}], 0xa, &(0x7f0000001080)=""/236, 0xec}, 0x2}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f00000012c0)=""/21, 0x15}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/169, 0xa9}], 0x9}, 0x7f}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/83, 0x53}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/217, 0xd9}, {&(0x7f0000002ac0)=""/142, 0x8e}, {&(0x7f0000002b80)=""/234, 0xea}], 0x7, &(0x7f0000002cc0)=""/19, 0x13}, 0x4}], 0x3, 0x10021, &(0x7f0000002d80)={0x77359400}) preadv(r1, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000170a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 17:45:33 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) [ 105.157239][ T5208] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.179020][ T5210] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "bea1"}]}}}], 0x18}}], 0x1, 0x0) 17:45:33 executing program 2: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000), 0x80, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000003380)=""/4112, 0x1010}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/116, 0x40}], 0x7, &(0x7f00000008c0)=""/8, 0x8}, 0xfe}], 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000002dc0)) r3 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@llc, 0x80, &(0x7f0000001000)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/243, 0xf3}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/137, 0x89}], 0xa, &(0x7f0000001080)=""/236, 0xec}, 0x2}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f00000012c0)=""/21, 0x15}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/169, 0xa9}], 0x9}, 0x7f}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/83, 0x53}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/217, 0xd9}, {&(0x7f0000002ac0)=""/142, 0x8e}, {&(0x7f0000002b80)=""/234, 0xea}], 0x7, &(0x7f0000002cc0)=""/19, 0x13}, 0x4}], 0x3, 0x10021, &(0x7f0000002d80)={0x77359400}) preadv(r1, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000170a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 17:45:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x4, "bea1"}]}}}], 0x18}}], 0x1, 0x0) [ 105.312814][ T5216] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:33 executing program 2: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000), 0x80, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000003380)=""/4112, 0x1010}, {&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/116, 0x40}], 0x7, &(0x7f00000008c0)=""/8, 0x8}, 0xfe}], 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') r2 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000002dc0)) r3 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000340)=@llc, 0x80, &(0x7f0000001000)=[{&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/243, 0xf3}, {&(0x7f0000000c00)=""/140, 0x8c}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/137, 0x89}], 0xa, &(0x7f0000001080)=""/236, 0xec}, 0x2}, {{&(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f00000012c0)=""/21, 0x15}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/169, 0xa9}], 0x9}, 0x7f}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/134, 0x86}, {&(0x7f0000001940)=""/83, 0x53}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/217, 0xd9}, {&(0x7f0000002ac0)=""/142, 0x8e}, {&(0x7f0000002b80)=""/234, 0xea}], 0x7, &(0x7f0000002cc0)=""/19, 0x13}, 0x4}], 0x3, 0x10021, &(0x7f0000002d80)={0x77359400}) preadv(r1, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000170a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 105.414659][ T5224] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:33 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 17:45:33 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4005ef3) fallocate(r1, 0x20, 0x0, 0x102000000) fallocate(r0, 0x0, 0x0, 0x4005ef3) fallocate(r0, 0x20, 0x0, 0x102000000) 17:45:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {0x44}, {0x6, 0x0, 0x0, 0xffffff97}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) [ 105.540652][ T5228] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 17:45:34 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 17:45:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:34 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x80000001, 0x14b) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@abs={0x1}, 0x6e) 17:45:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000000)={@mcast1}, 0x20) 17:45:34 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffe600) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffe600) 17:45:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) 17:45:34 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/30, 0x1e}, {0x0}, {0x0}], 0x3, 0x0, 0x0) 17:45:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/meminfo\x00', 0x0, 0x0) r1 = epoll_create(0x400) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xfa7aea7deaceb22d}) dup3(r0, r1, 0x0) 17:45:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) 17:45:34 executing program 2: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = io_uring_setup(0x20bb, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1b0012, r0, 0x0) [ 106.187119][ T5248] device lo entered promiscuous mode [ 106.192609][ T5248] device lo left promiscuous mode [ 106.199195][ T5248] device lo entered promiscuous mode [ 106.210157][ T5252] device lo left promiscuous mode 17:45:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\xafI\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) write(r2, 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 17:45:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) setfsgid(0x0) 17:45:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) [ 106.313783][ T5262] device lo entered promiscuous mode [ 106.327671][ T5262] device lo left promiscuous mode [ 106.440187][ T5273] device lo entered promiscuous mode [ 106.448426][ T5273] device lo left promiscuous mode 17:45:35 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe3b, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fff000018007f5f14fe01b2a4a29093020604dffffffe02641004053900090035000a03010000002d00124002001001020022dc1338d54404139b84136ef75afb83de4404000500", 0xff72}, {&(0x7f0000000040)="73005000d612110000ff0ea988", 0xd}], 0x2}, 0x8000000000000000) 17:45:35 executing program 2: r0 = syz_io_uring_setup(0x7747, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000021b000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x52de, &(0x7f0000000040), &(0x7f00005df000/0x2000)=nil, &(0x7f000002c000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6eaa, 0x0, 0x0, 0x0, 0x0) 17:45:35 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) 17:45:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount(&(0x7f00000001c0)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0, 0x1000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 17:45:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @mcast1}}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000000), 0x0) 17:45:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004540)=@newpolicy={0xb8, 0x13, 0x3, 0x0, 0x0, {{@in=@local, @in=@multicast2}}}, 0xb8}}, 0x0) 17:45:35 executing program 3: unshare(0x4040600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000380)) 17:45:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86080, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) unshare(0x4a060480) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 106.665617][ T5283] netlink: 65319 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.682554][ T5284] device lo entered promiscuous mode [ 106.688440][ T5284] device lo left promiscuous mode 17:45:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x81}, {0x6}]}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x2a1) 17:45:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) 17:45:35 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek(r0, 0x0, 0x0) 17:45:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055440)={0x0, [], 0x1, "8b3b1d94c8bc52"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:45:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:35 executing program 0: r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 17:45:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010003000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x806800}], 0x0, &(0x7f0000000040)) 17:45:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) shutdown(r0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 17:45:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86080, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) unshare(0x4a060480) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:45:35 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd2710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 17:45:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = eventfd2(0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400c40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053dc0)={0x0, [], 0x1f, "c23368e9e52e40"}) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat2(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x40087602, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0xf, 0x0, &(0x7f0000000080)) 17:45:35 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 17:45:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010003000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x806800}], 0x0, &(0x7f0000000040)) 17:45:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86080, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) unshare(0x4a060480) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 107.049092][ T5321] loop4: detected capacity change from 0 to 32872 [ 107.080988][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(r0, r1) [ 107.154383][ T22] audit: type=1400 audit(1634665535.536:408): avc: denied { confidentiality } for pid=5327 comm="syz-executor.3" lockdown_reason="unsafe use of perf" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 107.177962][ T22] audit: type=1400 audit(1634665535.536:409): avc: denied { read } for pid=5327 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 17:45:35 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000080)="ae", 0x35880}], 0x1}, 0xc011) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 17:45:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:45:35 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 17:45:35 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0xfffffffffffffffd, 0x3) mincore(&(0x7f000005c000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/54) 17:45:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86080, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) unshare(0x4a060480) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:45:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010003000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x806800}], 0x0, &(0x7f0000000040)) 17:45:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) [ 107.318516][ T5345] loop4: detected capacity change from 0 to 32872 [ 107.357406][ T5345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000000)=[{0x7c}, {0x2}, {0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd(0x0) 17:45:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f00000015c0)={0x2, 0x4e23, 0x11, @empty}, 0x18, 0x0}}], 0x1, 0x810) 17:45:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x2d, 0x6a2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x100}}}, 0x4c}}, 0x0) [ 107.519931][ T5361] loop4: detected capacity change from 0 to 32872 17:45:35 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 17:45:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010003000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x806800}], 0x0, &(0x7f0000000040)) [ 107.564660][ T5361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) 17:45:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f00000015c0)={0x2, 0x4e23, 0x11, @empty}, 0x18, 0x0}}], 0x1, 0x810) 17:45:36 executing program 2: r0 = syz_io_uring_setup(0x7463, &(0x7f0000000180), &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 17:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf257e"], 0x58}}, 0x0) 17:45:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0605345, &(0x7f0000000040)={{0x80}}) [ 107.710308][ T5372] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 17:45:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f00000015c0)={0x2, 0x4e23, 0x11, @empty}, 0x18, 0x0}}], 0x1, 0x810) 17:45:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) 17:45:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xfffffdfd, 0x0, 0x0, 0x9a5, 0x0, "f001ff000000130005002f00003eb1319d00"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000800)=0x1) [ 107.842207][ T5384] loop4: detected capacity change from 0 to 32872 [ 107.869163][ T5384] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 17:45:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:45:36 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {}, {r1, r3}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {r2}, {}, {r1, r3}, {r1}, {r2, r3}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2}, {}, {}, {0x0, r3}, {}, {}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {}, {}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {r2, r3}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {}, {r2, r3}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {}, {r2}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1}, {0x0, r3}, {r1}, {r2}, {r1}, {r2}, {r2}, {}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {0x0, 0x0}, {}, {r1, r3}], 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r6}, {0x0, r7}], 0x4, "8c73253a626560"}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) [ 107.885501][ T5388] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 17:45:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f00000015c0)={0x2, 0x4e23, 0x11, @empty}, 0x18, 0x0}}], 0x1, 0x810) 17:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf257e"], 0x58}}, 0x0) 17:45:36 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000b40), 0x8) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x1, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff}) [ 107.925369][ T5388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.940489][ T5391] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 107.956140][ T5391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 17:45:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) [ 108.074418][ C0] sd 0:0:1:0: tag#7747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 108.084403][ C0] sd 0:0:1:0: tag#7747 CDB: opcode=0xe5 (vendor) [ 108.090742][ C0] sd 0:0:1:0: tag#7747 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.099770][ C0] sd 0:0:1:0: tag#7747 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.108846][ C0] sd 0:0:1:0: tag#7747 CDB[20]: ba 17:45:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240), 0x1001, 0x0) 17:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf257e"], 0x58}}, 0x0) [ 108.121642][ T5402] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 108.138208][ T5402] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.157386][ C0] sd 0:0:1:0: tag#7780 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 108.167745][ C0] sd 0:0:1:0: tag#7780 CDB: opcode=0xe5 (vendor) 17:45:36 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {}, {r1, r3}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {r2}, {}, {r1, r3}, {r1}, {r2, r3}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2}, {}, {}, {0x0, r3}, {}, {}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {}, {}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {r2, r3}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {}, {r2, r3}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {}, {r2}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1}, {0x0, r3}, {r1}, {r2}, {r1}, {r2}, {r2}, {}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {0x0, 0x0}, {}, {r1, r3}], 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r6}, {0x0, r7}], 0x4, "8c73253a626560"}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) 17:45:36 executing program 2: r0 = syz_io_uring_setup(0x3036, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)='./file0\x00', 0x18}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 17:45:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 108.174087][ C0] sd 0:0:1:0: tag#7780 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.183151][ C0] sd 0:0:1:0: tag#7780 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.192190][ C0] sd 0:0:1:0: tag#7780 CDB[20]: ba 17:45:36 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x1, 0x4200, 0x0, 0x3) 17:45:36 executing program 3: r0 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 17:45:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf257e"], 0x58}}, 0x0) [ 108.318956][ T5418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.354121][ C0] sd 0:0:1:0: tag#7797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:45:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:45:36 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x10, 0x0, 0x0) [ 108.364233][ C0] sd 0:0:1:0: tag#7797 CDB: opcode=0xe5 (vendor) [ 108.370595][ C0] sd 0:0:1:0: tag#7797 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.379649][ C0] sd 0:0:1:0: tag#7797 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.388704][ C0] sd 0:0:1:0: tag#7797 CDB[20]: ba 17:45:36 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {}, {r1, r3}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {r2}, {}, {r1, r3}, {r1}, {r2, r3}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2}, {}, {}, {0x0, r3}, {}, {}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {}, {}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {r2, r3}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {}, {r2, r3}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {}, {r2}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1}, {0x0, r3}, {r1}, {r2}, {r1}, {r2}, {r2}, {}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {0x0, 0x0}, {}, {r1, r3}], 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r6}, {0x0, r7}], 0x4, "8c73253a626560"}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) 17:45:36 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "4826020000000000000cf1c5248f000000000000"}}]}, 0x150}}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = accept(r1, &(0x7f0000000140)=@ax25={{0x3, @null}, [@bcast, @remote, @rose, @bcast, @default, @default, @default]}, &(0x7f0000000080)=0x80) r3 = socket(0x2, 0x803, 0x9) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, r4, 0xd1883000) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)) r5 = socket$inet(0x2, 0x800, 0x7fffffff) r6 = accept4(r5, &(0x7f0000000540)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c8c5}, 0xd0) [ 108.430998][ T5431] loop0: detected capacity change from 0 to 264192 17:45:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 17:45:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev}, 0x1c) 17:45:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private, @in=@private}, {@in=@loopback, 0x0, 0x33}, @in6=@local}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) [ 108.474870][ T5436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 17:45:36 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES16]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000053b00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r110 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r110, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0}, {r58, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {r30}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {r23}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fc40)={0x7, [{0x0, r57}, {0x0, r10}, {}, {0x0, r73}, {0x0, r128}, {}, {}, {}, {r36}, {}, {0x0, r170}, {}, {r174, r33}, {}, {}, {r130, r167}, {0x0, r149}, {r27, r24}, {r61}, {0x0, r125}, {0x0, r189}, {r114}, {0x0, r172}, {r118}, {r4}, {0x0, r82}, {}, {0x0, r46}, {}, {}, {}, {r109, r6}, {0x0, r137}, {}, {0x0, r177}, {r175, r119}, {r138}, {0x0, r9}, {0x0, r8}, {r174}, {}, {r111, r14}, {r35, r151}, {r37}, {r155}, {r182, r3}, {r21, r178}, {r62}, {0x0, r171}, {0x0, r116}, {r165, r112}, {r185}, {r164}, {}, {0x0, r100}, {r2}, {}, {0x0, r103}, {r105, r75}, {r76}, {}, {r114}, {r72}, {r190}, {r89, r194}, {r142, r161}, {0x0, r120}, {r180}, {}, {r7, r28}, {}, {0x0, r177}, {}, {}, {r16, r179}, {r80}, {r157}, {}, {0x0, r139}, {r121}, {0x0, r48}, {}, {}, {}, {r41, r134}, {}, {r71}, {r29}, {}, {}, {r56}, {0x0, r127}, {0x0, r176}, {}, {r183}, {r115, r99}, {0x0, r81}, {}, {r140, r88}, {}, {}, {r160, r136}, {r193, r63}, {}, {0x0, r91}, {0x0, r158}, {r13}, {r162}, {r64}, {}, {r106}, {0x0, r11}, {}, {0x0, r152}, {r101}, {}, {r102}, {}, {}, {}, {}, {r192, r86}, {}, {r60}, {r166}, {r43}, {r83}, {}, {r98}, {}, {0x0, r78}, {}, {r153}, {}, {r107}, {0x0, r113}, {r66, r39}, {}, {r141, r33}, {}, {}, {r45, r47}, {0x0, r93}, {r169}, {}, {}, {0x0, r65}, {}, {0x0, r40}, {}, {r98}, {r32}, {}, {r117, r55}, {0x0, r154}, {}, {}, {r44}, {r135}, {}, {0x0, r68}, {r17}, {}, {r26}, {}, {r133, r34}, {r41}, {}, {}, {0x0, r70}, {r49, r178}, {0x0, r148}, {r92}, {r129}, {r166}, {r51}, {}, {r12, r191}, {r143, r77}, {}, {r145}, {r104}, {}, {0x0, r146}, {r144}, {}, {0x0, r85}, {}, {r17}, {}, {r126, r124}, {r173, r108}, {r45, r18}, {r79, r103}, {}, {r162, r50}, {r59}, {r123, r172}, {r97}, {0x0, r52}, {0x0, r69}, {0x0, r38}, {0x0, r25}, {0x0, r95}, {}, {0x0, r149}, {}, {0x0, r54}, {r23}, {}, {0x0, r5}, {r84}, {r53, r150}, {r132}, {}, {}, {}, {r94, r168}, {r22}, {r87, r67}, {r188, r187}, {0x0, r15}, {r186}, {0x0, r90}, {}, {r163}, {}, {}, {0x0, r147}, {}, {}, {}, {0x0, r18}, {}, {r96}, {0x0, r31}, {r186, r184}, {}, {0x0, r156}, {}, {}, {r42, r19}, {0x0, r131}, {r159}, {}, {}, {r122}, {r20}, {0x0, r181}, {}, {}, {}, {}, {}, {r74}], 0x1, "2225300ff82aee"}) close(r0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0xb6, 0xff, 0x9, 0x0, 0xfffffffffffffffa, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000280)}, 0x200, 0x7, 0x2, 0x5, 0x7, 0x1, 0x2, 0x0, 0x3, 0x0, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)=[0x0, &(0x7f0000000100)='\xfc|\xf5\x13\xd4\xf6P\xc5]F\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140xffffffffffffffff}, 0x4800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, r4, 0xd1883000) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)) r5 = socket$inet(0x2, 0x800, 0x7fffffff) r6 = accept4(r5, &(0x7f0000000540)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c8c5}, 0xd0) 17:45:37 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r1}, {0x0, r3}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {}, {r1}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {}, {}, {r1, r3}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {r2}, {r1}, {0x0, r3}, {r1}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r1}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {r2}, {}, {r1, r3}, {r1}, {r2, r3}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {r1}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {r2}, {}, {}, {0x0, r3}, {}, {}, {r2, r3}, {r1}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r2}, {0x0, r3}, {}, {r1}, {}, {}, {}, {}, {0x0, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {r2, r3}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1, r3}, {}, {r2, r3}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r1, r3}, {}, {r2}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {r1}, {0x0, r3}, {r1}, {r2}, {r1}, {r2}, {r2}, {}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2}, {r2}, {r1}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {0x0, 0x0}, {}, {r1, r3}], 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ea00)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec00)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r6}, {0x0, r7}], 0x4, "8c73253a626560"}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) 17:45:37 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0,